prepare ProviderHelper for consolidation before insert
import-log: don't count self certs as unknown