Yes. If the device is lost, the client certificate must be revoked, but in order to minimize the effects of the revocation, you should use a different client certificate for each device.