- We can revoke this certificate (if student does a chargeback on their card)
- We can update/reissue the certificate (usually because the student corrects their name in their profile)
- This PDF needs to persist for our documentation even if the student unenrolls from this course and then enrolls again two years later
- Certificates must have an ID with 12+ random digits to prevent enumerating our customers
- Admin can mark any enrollment as "certificate locked" and they can't get the certificate until we unlock it (we do this if they only made partial payment on the course to start)
Any ideas?