That’s because the vaccine cards were never designed to authenticate vaccine status. It was literally an appointment reminder mechanism. In fact, a PDF of the blank card was available from the CDC website.