What is written on the QR code of the new corona vaccination digital certificate 'EU Green Pass'?

From July 1, 2021, the EU will implement a digital certificate 'EU Digital COVID Certificate ', commonly known as 'EU Green Pass', which summarizes the test results of the new coronavirus and vaccination information. This EU Green Pass will provide information using a QR code or paper. Austrian engineer Tobias Girstmair blogs about what information is actually stored in the QR code and how.

gir.st --What's Inside the EU Green Pass QR Code?
https://gir.st/blog/greenpass.html

The eHealth Network department that developed the EU Greenpass technical specifications publishes the QR code specifications on GitHub.

hcert-spec / README.md at main · ehn-dcc-development / hcert-spec · GitHub
https://github.com/ehn-dcc-development/hcert-spec/commits/main/README.md

Actually, the QR code of the EU green passcode generated from the fictitious data is as follows. Girstmair says, 'It's a fairly large QR code, but it's an expected size considering that it stores more than just hyperlinks.'

When this QR code is decoded, the contents will be as follows.

[code] t @ thi3nkpad ~% zbarimg --raw greenpass.png
HC1: NCFOXN% TS3DH3ZSUZK + .V0ETD% 65NL-AH-R6IOO6 + IUKRG * I.I5BROCWAAT4V22F / 8X * G3M9JUPY0BX / KR96R / S09T. / 0LWTKD33236J3TA3M * 4VV2 73-E3GG UNFMJCRN0H3PQN * E33H3OA70M3FMJIJN523.K5QZ4A + 2XEN QT QTHC31M3 + E32R44 $ 28A9H0D3ZCL4JMYAZ + S-A5 $ XKX6T2YC 35H / ITX8GL2-LH / CJTK96L6SR9MU9RFGJA6Q3QR $ P2OIC0JVLA8J3ET3: H3A + 2 + 33U SAAUOT3TPTO4UBZIC0JKQTL * QDKBO.AI9BVYTOCFOPS4IJCOT0 $ 89NT2V457U8 + 9W2KQ-7LF9-DF07U $ B97JJ1D7WKP / HLIJLRKF1MFHJP7NVDEBU1J * Z222E.GJF67Z JA6B.38O4BH * HB0EGLE2% V -3O + J3.PI2G: M1SSP2Y3D38-G9C + Q3OT / .J1CDLKOYUV5C3W1A: 75S4LB: 6REPK

At first glance, it is a mysterious character string, but it is said that it is signed and encoded with specific information by Base45 encoding. What kind of information is encoded is described in the technical specifications published by eHealth Network (PDF file).

If you actually restore the above decoded contents to the original data with Girstmair's Python script , it will be as follows.

[code] {-260: {1: {'dob': '1998-02-26', #birthday
'nam': {'fn':'Musterfrau-Gößinger', # surname
'fnt':'MUSTERFRAU' 'gn':'Gabriele', #name
'gnt':'GABRIELE'}, #name passport notation
'v': [{'ci':'URN: UVCI: 01: AT: 10807843F94AEE0EE5093FBC254BD813 # B', #green passport ID
'co':'AT', #Vaccinated country
'dn': 1, # number of vaccinated times
'dt': '2021-02-18', # Vaccination date
'is':'Ministry of Health, Austria', # Witness
'ma':'ORG-100030215', #Vaccine Manufacturer
'mp':'EU / 1/20/1528', #Vaccine Manufacturing ID
'sd': 2, # Required number of vaccinations
'tg': '840539006', #Target disease (in this case, new coronavirus infection)
'vp': '1119349007'}], # Vaccination and prevention
'ver': '1.2.1'}}, #EU Green Passport Schema Version
1:'AT', #QR issuer
4: 1624458597, #QR code expiration date
6: 1624285797} # Generated QR code [/ code]

Summarizing this information, it can be read that '23-year-old Gabriele was vaccinated with Pfizer's mRNA vaccine (first time) in Austria on February 18, 2021.' The QR code does not include information on the effective period of the vaccine, but this is calculated by the scanner application from the number of vaccinations, the date of vaccination, and the situation.

Digital passports for vaccination such as EU green passports are being considered for introduction in the United States and Japan, but some are concerned that 'privacy remains uncertain.' After analyzing the QR code of the EU Green Pass, Girstmair said, 'Since there is no extra data other than the name and manufacturer of the inoculated vaccine, it can be said that the EU Green Pass code is converted to a QR code. , There can be no invasion of privacy that some are concerned about. '