Hi Chelsea, I have not seen that behavior before. Are you able to look at the access history view or access request admin view to get a holistic view of the access request activity for that identity. The account create is likely unrelated to the certification.
these particular actions are not showing in any of the request activity. they are showing up in account activity search when i look for type certification.