The overwhelming majority of work that has been done to automate regenerating the CA certificate started in the Puppet 6 timeframe.