puppetserver ca clean --certname <certname>
# puppet
k
puppetserver ca clean --certname <certname>