NHSX is now part of the NHS Transformation Directorate

Moving our content to its new home will take time. All information on this site remains valid and will continue to be maintained until further notice.

NHS Covid Pass CSCA Certificates (Country Signing Certificate Authority)

Your NHS COVID Pass securely stores vaccination and recovery status within verifiable 2D Barcodes. Applications which scan these barcodes, can download and store public keys which allow for digital verification of the barcodes contents. Part of this verification is ensuring that there is a valid chain of trust between the signed 2D barcode and the health authority responsible for issuing the barcodes.

This page contains the UK Root Health CSCA and Subordinate CSCA’s for NHS England, NHS Scotland and DHC Northern Ireland. These certificates can be used to validate the trust chain of Document Signer Certificates available through the EU Gateway.

The certificates are each provided as “.pem” files and can be accessed through the corresponding links below.

The distinguished name of the root certificate uses the following values

“C = GB, O = HMG, CN = National eHealth Root CA”

eHealth Root

Valid Until: 16-09-2031

Download

England DCC CSCA

Valid Until: 27-09-2025

Download

Scotland DCC CSCA

Valid Until: 27-09-2025

Download

Northern Ireland DCC CSCA

Valid Until: 27-09-2025

Download

For more information about the certificates, please email pki@nhsx.nhs.uk