The work was done in MDL-19125.
You probalby only need to back-port the core changes, and add the requireed capability to the certificate module. (Acutally I think the certificate module maintainers have already done that.) You don't need to add all the new capabilities to all the core modules. You can wait until the whole site is upgraded to 2.3 to get those.