When following the documentation Regenerate the agent certificate of your Puppet primary server and add DNS alt-names or other certificate extensions on the latest Puppet PE primary server I am running into some issues. When following it step by step i am running into the following output:

root@puppet-primary:[~] #: puppetserver ca clean --certname puppet-primary.home.arpa
Certificate for puppet-primary.home.arpa has been revoked
Cleaned files related to puppet-primary.home.arpa
root@puppet-primary:[~] #:


root@puppet-primary:[~] #: puppet ssl clean
Error: Could not run: Failed to connect to the CA to determine if certificate puppet-primary.home.arpa has been cleaned
Wrapped exception:
certificate verify failed [certificate revoked for CN=puppet-primary.home.arpa]
root@puppet-primary:[~] #:

This makes it seem that I need to manually remove the files in

/etc/puppetlabs/puppet/ssl/

. (Also the docs should say

pe-puppetserver

instead of

puppetserver

but this something I might bring up with support.