Sceau reads the chip of ICAO 9303 identity documents over NFC and checks that they are genuine. It works entirely offline: no network permission, nothing is kept, nothing is sent. <b>Supported documents</b> <ul> <li>Biometric passports from any country, using the document number, date of birth and expiry date</li> <li>French national identity card (credit card format, since 2021), using the 6-digit CAN printed on the card</li> <li>European identity cards, using the CAN or the MRZ</li> </ul> <b>What Sceau shows</b> <ul> <li>The photo stored in the chip</li> <li>Identity: surname, given names, sex, date of birth, nationality, document number, issuing state, expiry date</li> <li>The holder's handwritten signature, if the issuing state stored it in the chip</li> <li>Additional data when the chip holds it (place of birth, address, issuing authority and date of issue…)</li> </ul> <b>What Sceau verifies</b> <ul> <li>The issuing state's signature over the data, up to a known root certificate, and the integrity of each data group (Passive Authentication)</li> <li>That the chip is not a clone, when the document supports it (Chip Authentication, Active Authentication)</li> </ul> The result is a verdict (Authentic, Valid signature but chip not verified, Unknown issuer, Failed) with a detailed checklist. <b>Trust store</b> Sceau ships the French CSCA certificates published by ANTS, certificates published by the United Kingdom, Georgia and Luxembourg for their own documents, and the German Master List published by BSI, which covers the European Union, the EEA, Switzerland and the United Kingdom among others. The trust store screen can be searched by country. For a document whose issuer is not included, the verdict is "Unknown issuer"; you can import a Master List published by another state, or a single CSCA or link certificate after checking its fingerprint, and remove each imported item individually. Revocation lists are not checked. Sceau is not affiliated with or endorsed