refs #1843 normally facts base hash has no certname.

this will make sure we don't fetch the wrong host (without a certname) by mistake.