The cert should have a date, location, signature, and maybe even a dose identification - all of which can be checked against the database of whomever supposedly administered it.
Also never occurred to me that someone in the ICU will show a certificate or pretend to be vaccinated (at that point what do you get?).
Not sure if I’m missing standard social cues or something more obvious with my questions.