Cybersecurity specialist calls out flaw of COVID digital certificates