A certificate QR code has two jobs: it must be readable on the finished certificate, and it must take the reader to the correct credential. Test those jobs separately before approving a print run. A scan that opens a web page is not enough if the page belongs to another recipient.