I have yet to see a situation where moodle has not logged something that actually happen. I have seen a lot of students say they did something when they actually didn't. I am not sure what you are saying about the certificate? Have they downloaded it? How do you know? Is the certificate restricted to only being available when the course is completed?