looks like "puppetcatalog.com" port 8140 is not reachable from your client. can you test with telnet or nmap if port 8140 and this dns name is reachable?