Before continuing, please note that I have very little knowledge about or experience with certificates, so this might be completely redundant. Should this be the case, please let me know so that I can delete this question.
A few hours or so ago I stumbled upon a question about a problem with certificates that seemed interesting to me, so I started looking into it. After a while (without figuring out the problem) I went ahead and tried out different data in hopes of reproducing the problem (which is a rather well-known and persistent one).
For this, I had to get a certificate string, which I found in a question, here on Stack Overflow. Now, after generating the certificate using the CertificateFactory I noticed that this certificate includes data like "Full name", "Email address", "Company name" etc., which now has me wondering if that's unintended disclosure of personal data.
TL;DR: Certificate strings found on Stack Overflow can be converted to a full certificate, which happens to contain (always, thus far) at least the full name and the email address. Is that something we need to worry about?
Authorization
headers with Basic Auth data, because such data is trivially decoded as base64 to a username and password. If certificate data can equally trivially be turned back into readable contact information, then there might be grounds to scrub that too.