I think entering his email is a much better option because he might lose the damn certificate. But, as soon as he has an email, he won't lose it, and he'll be able to access it anytime when he wants.