What does a device certificate contain? Can custom data be added to it?

The device certificate contains: the device Node ID, the RainMaker MQTT server address the device connects to, the URL for obtaining MQTT connection credentials (for public cloud), the device certificate and private key, and a random string.

For certificates generated in a private deployment environment using esp-rainmaker-admin-cli, refer to the Adding Custom Data section in the certificate operations documentation.