Transformation Directorate

NHS Covid Pass CSCA Certificates (Country Signing Certificate Authority)

Your NHS COVID Pass securely stores vaccination and recovery status within verifiable 2D Barcodes. Applications which scan these barcodes, can download and store public keys which allow for digital verification of the barcodes contents. Part of this verification is ensuring that there is a valid chain of trust between the signed 2D barcode and the health authority responsible for issuing the barcodes.

This page contains the UK Root Health CSCA and Subordinate CSCA’s for NHS England, NHS Scotland and DHC Northern Ireland. These certificates can be used to validate the trust chain of Document Signer Certificates available through the EU Gateway.

The certificates are each provided as “.pem” files and can be accessed through the corresponding links below.

The distinguished name of the root certificate uses the following values

“C = GB, O = HMG, CN = National eHealth Root CA”

eHealth Root

Valid Until: 16-09-2031
Download

England DCC CSCA

Valid Until: 27-09-2025
Download

Valid Until: 01-09-2026
Download

Scotland DCC CSCA

Valid Until: 27-09-2025
Download

Valid Until: 01-09-2026
Download

Northern Ireland DCC CSCA

Valid Until: 27-09-2025
Download

Valid Until: 01-09-2026
Download

For more information about the certificates, please email pki@nhsbsa.nhs.uk