[jolan]

You can verify whether you received a genuine key at:

https://www.yubico.com/genuine/

[willismichael]

Unless some entity can man-in-the-middle attack your attempt at verifying it.

[OrgNet]

https is not safe against the government....

[OrgNet]

... because they can force CAs to give them the keys to decrypt all traffic.