by default, the console certificate comes from the...
# puppet-enterprise
b
by default, the console certificate comes from the Puppetserver CA