Permissions in /etc/ssl/certs

Moin, is it correct, that others can read all pem-files in /etc/ssl/certs incl. the Private Key Sections? Is that a security hole becaus an local user can read the sections? All Files have 644 at standard in this folder. Any problems if i will make an chmod 640 /etc/ssl/certs/* ? MfG... Pierre Bernhardt