Public Key Infrastuctures

Your NHS Covid Pass securely stores vaccination, test and recovery status within verifiable 2D Barcodes. Applications which scan these barcodes, can download and store public keys which allow for digital verification of the barcodes contents. Part of this verification is ensuring that there is a valid chain of trust between the signed 2D barcode and the health authority responsible for issuing the barcodes.

The UK Root Health CSCA and Subordinate CSCA’s for NHSx England, NHS Scotland and DHC Northern Ireland page contains certificates that can be used to validate the trust chain of Document Signer Certificates available through the EU Gateway.