This should not be a problem. The user probably cannot e-mail it to you, since he or she is locked out of the account. But if you get a copy of the ID on a diskette or some other media, you can go ahead and recertify it with the Domino Admin client.
Can't you just recertify an expired ID using the normal method? Once the ID hits the person document and sees the new certificate, it should pull it down and the user should have access again.
Do you have comments on this Ask the Expert question and response? Let us know.
This was first published in September 2004