make absent certification level work in logic; only touch certificate-related files and keep others untouched (closes bug#3665)