Passport & ID card trust lists

The CodeB Wallet checks passport and ID card chips against the issuing country's signing authority (CSCA). This server downloads the CSCA master list once a week and the CSCAs' revocation lists (CRLs) once a day. It publishes both unchanged for the wallet. A download only replaces the stored file after its signatures are checked; otherwise the last good file stays in place.

Checking sign-in…

Admin access required

Sign in with an admin account to see this page.

Download now

Runs a download immediately instead of waiting for the schedule. The same checks apply. The CRLs take a few minutes because about 200 country servers are asked; one manual run per minute.

Master list

Revocation lists (CRLs)

Stored CRLs

One CRL per country signing authority, each checked against that authority's signature. A CRL past its next update stays published until a newer one arrives.

CountryIssuerThis updateNext updateRevokedSignatureDownloaded fromStored

CSCA certificates in the master list

CountrySubjectValid fromValid toCRLSHA-256

Manually added CRLs

Some countries publish their CRL only behind a browser check, which a server cannot pass. Download such a CRL in a browser and copy it into App_Data/_shared/wallet-trust/crl-manual/ on the server (any name ending in .crl). The next CRL run adds it if the country's signature is valid.

Activity

Latest entries first.