@adamtoth You can go for two Certification tasks. One with the set of Environment, Business Unit and groups for the technical team/Managed by group and another for the Service Owner to confirm, what Business Applications and Service Instance it's related to. 

Or when the Single Certification task is confirmed on the environment, it indirectly confirms the Service Instance (If they are created per environment) it's hosted for.