Someone could steal the scan, get the real cert number from the seller, use the same scan later, and supply the real cert.