It contains a QR code with a digital signature to protect it against falsification When the certificate is checked, the QR code is scanned and the signature verified Each issuing body (e.g. a test centre, a hospital, a health authority) has its own digital signature key. All of these are stored in a secure database in each participating country The personal data of the certificate holder is stored securely by European Commission