See the `jesse-certificate_extensions_facts` modul...
# puppet-enterprise
d