What impressed me was that the verification was done fully offline in a privacy preserving way
[1] https://tadas.varanauskas.lt/posts/forging-lithuanian-vaccin...