when not flattening attr certs, group by id