This page provides the possibility to download the EU Digital Covid Certificates (EU DCC) Signer Certificates Archive. The content of this archive can be used to verify that an EU DCC was generated by an authorised issuer.
Verifiers need a legal basis pursuant to Article 6 of Regulation (EU) 2016/679 (GDPR) to lawfully process the personal data contained in an EU DCC.
Archive Content
This Archive contains two different certificate types: Digital Signer Certificate (DSC) and Country Signing Certificate Authority (CSCA). The Archive is structured by certificate type (DSC or CSCA), domain (currently just DCC), and the 2-digit country code.
The certificates are encoded as PKCS#8 saved in ".pem” files named by their certificate SHA-256 thumbprint.
The Archive and all of its contents are signed by a certificate of the European Commission. The signature file is available for download at the end of this page. The signature file contains a base64 encoded CMS-Message with a detached payload (PKCS#7). Instructions on how to verify the downloaded file are available in the Readme.txt file include in the package.
The information contained in this archive is provided on an as-is basis with no guarantees of completeness, accuracy, efficacy or timeliness. The European Union assumes no responsibility or liability for any errors or omissions in the content of this archive or any implications arising therefrom.
Availability
The Archive is available for download from the link placed at the bottom of this page, subject to the terms and conditions outlined herein.
Updates
The Archive is updated automatically at daily intervals.
Terms and Conditions
The use of the public keys is subject to the DATA LICENSE included in the package. The text of the DATA LICENSE is set out below.
DATA LICENSE for the database of public keys of digital signer certificates, originally available from the page on ehealth and COVID-19
- This DATA LICENSE shall govern the use of the database of public keys of digital signer certificates. The use of the copyright and database right material provided in this database (the "Data") indicates that you accept the terms and conditions of this license. You may not amend this license under any circumstances.
- Licensor of this database is the European Commission. The Licensor grants you a worldwide, royalty-free, perpetual, non-exclusive license to use the Data subject to the conditions below.
- This license grants the exercise of the following rights regarding the Data, subject to the observation of the conditions in section 4:
a) to copy, publish, distribute and transmit the Data;
b) to incorporate the data in commercially and non-commercially available products and/or services.
These rights are restricted to the Data itself and shall not be construed to extend beyond implicitly.
- Any exercise of the rights granted in section 3 shall be conditional upon the observance and fulfillment of the following obligations:
a) to acknowledge the use of the database and attribute the copyright and database rights of the European Commission in an appropriate manner and with appropriate notice;
b) to acknowledge and notify in an appropriate manner and with an appropriate notice that the use of the database does not constitute endorsement of any products and/or services by the European Commission;
c) to provide the text of this license in an appropriate manner and with appropriate notice to any intended recipient of the Data.
You may use the following notices at your discretion:
"Contains data provided by the European Commission under the DATA LICENSE. The European Commission does not endorse any products and/or services by providing this data."
- Foremost, this license is governed by the law of the European Union and additionally by the law of the Member State of the European Union you or an intended recipient resides in. If you or any intended recipient do not reside in a Member State of the European Union, the laws of the Kingdom of Belgium shall apply in addition to the law of the European Union.
- The European Commission shall not be liable in any capacity for any use of the Data by third parties. It shall only be liable for any deliberate and intentional damage caused by a deliberate and intentional default of the Data under any statutory law applicable according to section 5. Any further liability, representation, warranty, or obligation of the European Commission is explicitly excluded.
- This license does not constitute a legal basis pursuant to Article 6 of Regulation (EU) 2016/679 (GDPR) to process the personal data contained in an EU Digital COVID Certificate.
