A masked certificate is generated for every claim. You can obtain the URL to it from the
masked_cert_url field of the response JSON when you claim a certificate. Capture this value and store it with the lead data. You can then send it to any buyer instead of the original full certificate.
For a full overview of the concept of 'Masked Certificates' click here.