@Anthony Somerset The puppet agent was running on a virtual machine that I had just created from an Ubuntu image, so there shouldn't have been any past certificates on it. Just to make sure, I'll recreate the VM and try again