Hi,
As I recall - if a user is in a group that is assigned to a certification then its certification will be checked. If user's group is not in that list - system will not check the cert. It's a bit weird, but that's the logic in place. So if you want certification to be verified for all users - all user group should be assigned.
Regards,
Konstantin Chernega