From 1d7eb313c3b8cf6aa89f6853fcb0034ed54023f6 Mon Sep 17 00:00:00 2001
From: Maximilian Hubert <64627729+gap-editor@users.noreply.github.com>
Date: Mon, 25 Aug 2025 13:15:54 +0200
Subject: [PATCH] fix link to icao-master-list

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index d1fa894fd..80e9774aa 100644
--- a/README.md
+++ b/README.md
@@ -82,7 +82,7 @@ The diagram below, taken from the ICAO, summarizes the process:
 
 ### How to retrieve the CSCA certificates?
 
-You may have noticed that in the previous answer, we mentionned the DSC is stored in the passport chip itself, so it is easy to retrieve, but what about the CSCA certificates? Well, they are not in the passport chip, so we need to retrieve them from somewhere else. States will have agreements between them so they can easily exchange the certificates through trusted channels so border controls can be sure they got the right CSCA certificates. Multiple States publish their CSCA certificates publicly on their websites, such as is the case for [France](https://ants.gouv.fr/csca) and [Germany](https://www.bsi.bund.de/EN/Themen/Oeffentliche-Verwaltung/Elektronische-Identitaeten/Public-Key-Infrastrukturen/CSCA/Root_Cert_Germany/Root_Certificate_node.html) for example. The ICAO also maintains a Master List of CSCA certificates of many different countries that can be found [here](https://www.icao.int/Security/FAL/PKD/Pages/icao-master-list.aspx). So getting the CSCA certificates is not as easy as the DSCs, but it is not too hard either.
+You may have noticed that in the previous answer, we mentionned the DSC is stored in the passport chip itself, so it is easy to retrieve, but what about the CSCA certificates? Well, they are not in the passport chip, so we need to retrieve them from somewhere else. States will have agreements between them so they can easily exchange the certificates through trusted channels so border controls can be sure they got the right CSCA certificates. Multiple States publish their CSCA certificates publicly on their websites, such as is the case for [France](https://ants.gouv.fr/csca) and [Germany](https://www.bsi.bund.de/EN/Themen/Oeffentliche-Verwaltung/Elektronische-Identitaeten/Public-Key-Infrastrukturen/CSCA/Root_Cert_Germany/Root_Certificate_node.html) for example. The ICAO also maintains a Master List of CSCA certificates of many different countries that can be found [here](https://www2023.icao.int/Security/FAL/PKD/Pages/icao-master-list.aspx). So getting the CSCA certificates is not as easy as the DSCs, but it is not too hard either.
 
 ### How often do the CSCA certificates rotate?