Is a Digital Certificate considered to be software or just data?

Some vendors classify a digital certificate as software – which means that it is subject to US export controls and cannot be sent to certain countries – depending on the key length used.

My view is that a digital certificate is nothing more than data – and cannot be considered as a piece of software.

What is your view ?