The article appears to be wrong, from what I can tell: There isn't "a" private key. Rather, each country has one, which is used to sign intermediate keys, which

The article appears to be wrong, from what I can tell: There isn't "a" private key. Rather, each country has one, which is used to sign intermediate keys, which in turn are used to sign the vaccination certificates. Some of those intermediates have been either leaked or misused, AFAICT. There have been stories about misuse before. Here is one from Munich, where someone with technical access charged €350 to issue a certificate without going through those preliminaries with the syringe: https://www.br.de/nachrichten/bayern/fnord,SmfuqIK https://www.br.de/nachrichten/bayern/fnord,SmfuqIK