There is now an official module to help with that: forge.puppet.com/puppetlabs/certregen
Also, when you renew the CA certificate, you soon find that you need to renew the agent certificates as well. I wrote about this at dev.to/camptocamp-ops/automatic-re...
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.