The private key used to sign European Union Digital Covid certificates has been reportedly leaked and is being circulated on messaging apps and online data breach marketplaces.