(for use with creating additional compilers)
If you aren’t using the curl method, use the puppet certificate generation method (note: make sure the ssl dir is clean):
puppet certificate generate <fqdn> –ca-location remote –dns-alt-names <comma separated dns alt name list>
Then approve through the same methods on the master
puppet cert sign <fqdn> –allow-dns-alt-names