The alternative is something like the Zero Knowledge Proofs that Google recently open sourced: https://blog.google/technology/safety-security/opening-up-ze...
This would allow you to prove that you have the certificate that was issued to you, without giving up more detail than that.
I think that building that into things is a ways off though.