puppet 6.19.1 → 6.23.0

data/spec/fixtures/integration/application/agent/cached_deferred_catalog.json

@@ -0,0 +1,91 @@
+{
+  "tags": [
+    "settings"
+  ],
+  "name": "127.0.0.1",
+  "version": 1607629733,
+  "code_id": null,
+  "catalog_uuid": "afc8472a-306b-4b24-b060-e956dffb79b8",
+  "catalog_format": 1,
+  "environment": "production",
+  "resources": [
+    {
+      "type": "Stage",
+      "title": "main",
+      "tags": [
+        "stage"
+      ],
+      "exported": false,
+      "parameters": {
+        "name": "main"
+      }
+    },
+    {
+      "type": "Class",
+      "title": "Settings",
+      "tags": [
+        "class",
+        "settings"
+      ],
+      "exported": false
+    },
+    {
+      "type": "Class",
+      "title": "main",
+      "tags": [
+        "class"
+      ],
+      "exported": false,
+      "parameters": {
+        "name": "main"
+      }
+    },
+    {
+      "type": "Notify",
+      "title": "deferred",
+      "tags": [
+        "notify",
+        "deferred",
+        "class"
+      ],
+      "file": "",
+      "line": 1,
+      "exported": false,
+      "parameters": {
+        "message": {
+          "__ptype": "Deferred",
+          "name": "new",
+          "arguments": [
+            {
+              "__ptype": "Pcore::StringType"
+            },
+            {
+              "__ptype": "Deferred",
+              "name": "binary_file",
+              "arguments": [
+                "__SOURCE_PATH__"
+              ]
+            }
+          ]
+        }
+      }
+    }
+  ],
+  "edges": [
+    {
+      "source": "Stage[main]",
+      "target": "Class[Settings]"
+    },
+    {
+      "source": "Stage[main]",
+      "target": "Class[main]"
+    },
+    {
+      "source": "Class[main]",
+      "target": "Notify[deferred]"
+    }
+  ],
+  "classes": [
+    "settings"
+  ]
+}

data/spec/fixtures/ssl/127.0.0.1-key.pem

@@ -1,67 +1,117 @@
-Private-Key: (1024 bit)
+RSA Private-Key: (2048 bit, 2 primes)
 modulus:
-    00:98:34:bb:6c:44:52:00:23:29:ae:bb:7c:c9:91:
-    ec:6b:1c:83:b1:db:6c:b6:1b:12:fb:e3:f4:e4:20:
-    27:6c:c7:50:f9:ac:ef:f8:7a:de:00:4a:01:cb:ba:
-    9b:be:35:3c:e5:33:ef:32:79:61:1c:a6:70:23:19:
-    16:19:ae:33:e5:96:0a:70:3d:81:2f:b3:59:64:89:
-    45:ef:86:97:4d:00:9b:1d:68:9e:8d:5e:75:fb:69:
-    c0:1b:b2:06:1d:97:1a:27:30:38:3e:4f:11:04:70:
-    70:98:c1:6a:fc:93:a5:17:0f:fb:fe:42:31:af:f3:
-    6a:bc:51:dc:33:86:be:5f:c9
+    00:ac:e5:d9:12:cd:61:69:66:ca:b9:6d:cf:b7:b5:
+    be:b9:21:de:d5:7d:dd:35:bc:c7:2a:23:a3:46:11:
+    ad:a7:23:02:f9:d1:71:ec:8c:34:c2:9b:bb:dd:6b:
+    b4:1f:4c:01:e9:c3:55:f4:ad:aa:17:24:ce:03:59:
+    54:fc:ce:f0:c0:c0:df:1e:89:b2:99:45:8d:49:cd:
+    68:7e:77:00:65:c2:ed:4a:90:fc:18:d7:50:3c:21:
+    28:a8:93:a1:47:ee:58:da:09:47:7d:67:70:a7:a8:
+    83:ea:38:d8:97:96:fd:f0:b7:17:3b:ab:fc:db:2b:
+    80:cf:e4:eb:4a:0f:0c:80:b0:18:d0:44:9a:6e:74:
+    70:a3:26:35:98:ad:f5:0c:b1:47:43:57:8a:ac:08:
+    30:b7:a0:9a:77:60:07:70:69:ef:50:9d:06:85:90:
+    20:71:67:2e:f5:c8:b0:1b:b2:fd:ff:57:4b:b6:0e:
+    18:d9:7b:95:e1:12:6b:fa:d2:8b:70:f8:1a:d3:36:
+    8d:c8:91:e0:d1:75:5a:21:17:f7:fe:70:e8:46:14:
+    d8:e1:f2:77:7d:21:76:0c:3b:e4:02:b9:d7:18:ac:
+    86:a3:1e:33:fc:34:72:c6:ea:7f:20:fe:39:74:cf:
+    ff:89:47:47:45:e1:71:13:46:7e:84:8c:23:2e:41:
+    1d:87
 publicExponent: 65537 (0x10001)
 privateExponent:
-    6a:b3:cd:10:c1:74:9b:14:0b:8c:ab:73:77:fc:0c:
-    b9:aa:6b:c8:ac:03:32:47:18:af:ed:c7:28:86:42:
-    1d:48:3d:c4:4b:30:90:09:d2:c8:71:19:81:31:79:
-    2d:87:35:01:99:be:fe:ab:89:21:04:ad:68:6d:95:
-    c8:bb:0f:35:b7:84:83:ce:32:fe:9e:98:b5:71:a0:
-    67:30:e5:17:1d:d9:c3:48:9b:a7:c1:f4:17:f8:4a:
-    bb:88:1b:94:2c:cc:5d:90:92:f8:6e:93:36:eb:42:
-    63:d0:c9:6f:04:e5:c1:2f:dc:a8:1f:19:ed:e5:b0:
-    45:23:ab:82:d4:0b:69:81
+    00:87:54:8d:59:63:3a:89:06:b5:4c:f8:bf:ea:7a:
+    ae:63:38:38:b4:00:85:82:47:55:d9:0c:f6:02:a5:
+    59:b8:05:f6:91:55:b8:07:40:23:17:e4:4f:e2:db:
+    27:ac:8b:90:bf:c9:6e:61:4b:01:64:86:21:5e:8b:
+    b0:b3:04:c3:7b:0c:3c:58:29:cd:8a:9c:df:1f:52:
+    51:25:13:be:52:e8:85:55:a5:30:3d:bd:62:86:fe:
+    29:55:f1:df:fe:6e:78:4b:89:91:d4:7d:7f:b7:2b:
+    76:bd:81:6b:3f:14:27:86:1f:b9:66:b2:93:03:76:
+    04:a8:34:f5:5a:0d:77:6a:cd:a1:6a:34:43:1b:e8:
+    2f:d6:81:ca:68:fc:93:53:9d:16:30:22:e4:80:44:
+    6b:ec:dc:ec:f6:d0:48:69:5d:89:af:a3:02:09:40:
+    25:9a:23:48:ad:58:c1:8d:25:af:74:6e:38:ec:dc:
+    ee:b8:79:e1:94:36:62:64:93:94:9b:29:0c:44:8c:
+    40:ef:40:d3:4b:89:96:5d:9f:84:8a:f7:f6:9a:6a:
+    d4:19:ea:f6:90:07:3f:b8:b3:4e:33:dc:7f:e9:32:
+    00:58:1c:52:1e:80:3b:94:50:4e:f4:56:c4:77:97:
+    d4:66:9e:03:be:5a:be:b1:8f:73:3f:ea:e4:5e:d4:
+    5c:79
 prime1:
-    00:c8:90:0e:0f:a2:ab:82:a7:e5:3a:69:dd:3a:e7:
-    a2:80:ef:b2:12:c5:fb:4b:a2:cf:b6:9a:41:8c:d8:
-    b5:76:05:c5:d3:c6:0e:1d:c6:1e:14:9f:14:21:53:
-    15:08:42:70:12:12:36:1e:0d:be:b8:5d:ce:46:66:
-    0b:fc:1a:dd:95
+    00:de:cf:6e:40:b7:15:fc:7d:11:6d:bf:78:12:9e:
+    75:28:de:92:99:3f:70:e0:98:2f:2b:8b:a8:32:3a:
+    b5:c6:5b:da:7d:25:e2:c7:ff:bf:79:74:28:26:1f:
+    cd:75:84:2c:c0:99:9f:aa:dc:e0:8d:ec:0b:d8:f0:
+    89:11:d7:24:26:53:8a:62:77:ba:5b:07:c8:2a:62:
+    99:25:28:fc:00:9d:03:c0:d6:c3:28:2e:46:9d:5b:
+    71:8e:d0:1a:2f:3d:19:93:29:f4:89:a3:cd:41:d2:
+    8a:64:a2:cd:19:11:f9:6e:59:e4:35:9d:7f:d1:31:
+    74:5b:48:f4:7b:e8:1a:20:73
 prime2:
-    00:c2:46:ec:9d:fc:0b:1c:e7:c4:b3:2a:eb:ff:64:
-    8e:2d:32:f7:f5:9c:bf:60:46:ca:46:db:91:33:fb:
-    47:8a:c4:2c:c7:4a:b0:34:cb:34:1b:93:bd:aa:3a:
-    3a:a4:b8:f6:4e:4b:b7:23:03:bb:07:43:6e:39:31:
-    61:ce:0c:24:65
+    00:c6:a7:12:f0:68:f2:30:a9:c3:78:59:a6:f7:fb:
+    dc:05:93:14:c7:54:00:c6:f7:5c:1a:c4:3a:07:b2:
+    25:f2:fb:83:7e:20:f5:c4:dd:fc:46:54:2e:58:89:
+    c2:fc:4e:5c:d8:a8:a1:a7:98:76:59:ad:45:94:fc:
+    97:d4:a5:0b:1e:51:07:3e:86:e0:2e:f7:29:32:71:
+    65:a5:3b:97:33:bc:00:f4:f7:66:e6:ee:49:ec:19:
+    5c:b3:74:0e:61:ce:94:3e:f4:69:32:ea:df:b3:d8:
+    08:df:56:36:ca:af:c7:e8:f1:0d:91:b4:0b:fb:47:
+    05:fd:87:02:41:48:9d:2d:9d
 exponent1:
-    14:08:5f:7f:2c:4e:59:44:8f:de:df:c8:1b:24:1b:
-    d5:29:1b:ee:48:1c:2b:97:dd:8b:6d:a8:f2:7a:8a:
-    d5:79:0a:23:76:fa:dd:fa:75:f2:b5:58:fb:63:23:
-    0c:aa:26:2b:87:ea:23:e2:57:94:6e:ba:35:c9:e7:
-    94:8c:d2:69
+    56:77:57:49:04:04:23:45:01:f3:7e:3f:81:b2:3e:
+    b3:4a:94:c7:a6:08:0f:10:e0:15:5d:10:3b:d5:ee:
+    de:f8:9c:74:be:b4:20:7b:4e:7a:3a:aa:ae:08:df:
+    7a:00:7e:41:8c:1c:9b:79:36:27:bd:77:e7:8b:89:
+    16:04:50:c2:12:df:7c:51:0c:5f:f1:48:2b:b2:b1:
+    cd:ea:f6:c8:e2:26:27:ba:f0:67:72:75:f2:f1:1e:
+    c3:96:5c:e3:02:2a:1f:a3:43:83:fa:ae:58:21:f5:
+    95:12:5c:d7:a2:d3:12:91:0d:f0:04:9c:2a:b9:af:
+    77:11:7b:d7:6d:fe:5d:a3
 exponent2:
-    50:c3:c5:68:64:38:86:7a:bf:a6:30:68:cd:d2:92:
-    dc:ad:7c:b1:c9:c9:31:90:1c:55:5a:c0:41:98:ec:
-    03:ff:4c:12:49:b5:79:2d:24:eb:75:fe:fa:3e:9c:
-    d4:8f:e4:2d:66:82:aa:f6:c9:10:da:f2:7e:aa:4d:
-    db:a7:e6:95
+    43:20:be:13:a3:43:04:12:b9:cc:f7:6e:a6:a9:e3:
+    25:b7:17:f4:6b:7c:7f:bf:a2:ce:20:b5:03:58:bd:
+    de:28:03:bd:21:62:2b:8e:5f:eb:5c:12:f5:34:48:
+    41:7e:31:7d:bd:2e:33:36:1f:f8:19:c7:43:9b:3f:
+    ab:49:c2:42:12:5b:82:53:8d:7a:11:67:48:76:6d:
+    44:b2:a8:5b:81:12:49:b5:38:7e:9c:d3:3a:07:2f:
+    fe:2c:1f:98:09:78:aa:f5:68:7f:1e:43:4d:c0:98:
+    ee:ef:71:40:78:b9:f3:0b:51:ec:84:8c:ef:f2:86:
+    21:af:f7:a1:1b:ea:91:39
 coefficient:
-    45:11:a8:a2:ab:92:a6:f2:42:b3:7f:09:8d:ae:45:
-    25:e5:c6:24:9e:80:ea:58:b5:d7:44:7f:84:47:6b:
-    4d:da:f0:f3:4c:60:5b:9d:18:64:b2:89:2c:1e:b2:
-    60:35:58:ef:90:6f:b5:12:d7:0e:d7:7b:4a:62:ac:
-    38:b4:12:80
+    37:50:c3:b7:3b:85:e4:0d:db:82:ac:12:23:ca:6c:
+    84:45:ed:16:c0:bb:9c:0d:58:1d:52:b0:c3:a8:8a:
+    4e:f6:b4:ac:6d:b5:d5:18:0c:bc:80:fe:53:55:13:
+    c7:92:e5:71:95:bc:93:e8:24:93:94:ef:f0:10:00:
+    db:00:20:c1:f4:50:6d:9d:53:e7:58:e8:7e:04:34:
+    2e:fd:b9:b0:51:ff:22:b0:d6:ad:84:9e:c0:22:6f:
+    f8:40:a7:22:b8:46:3a:92:47:76:16:de:af:8d:a2:
+    5e:02:1d:21:32:be:88:b3:83:f8:6d:b9:9c:ce:19:
+    55:38:7d:98:65:8a:4d:25
 -----BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQCYNLtsRFIAIymuu3zJkexrHIOx22y2GxL74/TkICdsx1D5rO/4
-et4ASgHLupu+NTzlM+8yeWEcpnAjGRYZrjPllgpwPYEvs1lkiUXvhpdNAJsdaJ6N
-XnX7acAbsgYdlxonMDg+TxEEcHCYwWr8k6UXD/v+QjGv82q8Udwzhr5fyQIDAQAB
-AoGAarPNEMF0mxQLjKtzd/wMuapryKwDMkcYr+3HKIZCHUg9xEswkAnSyHEZgTF5
-LYc1AZm+/quJIQStaG2VyLsPNbeEg84y/p6YtXGgZzDlFx3Zw0ibp8H0F/hKu4gb
-lCzMXZCS+G6TNutCY9DJbwTlwS/cqB8Z7eWwRSOrgtQLaYECQQDIkA4PoquCp+U6
-ad0656KA77ISxftLos+2mkGM2LV2BcXTxg4dxh4UnxQhUxUIQnASEjYeDb64Xc5G
-Zgv8Gt2VAkEAwkbsnfwLHOfEsyrr/2SOLTL39Zy/YEbKRtuRM/tHisQsx0qwNMs0
-G5O9qjo6pLj2Tku3IwO7B0NuOTFhzgwkZQJAFAhffyxOWUSP3t/IGyQb1Skb7kgc
-K5fdi22o8nqK1XkKI3b63fp18rVY+2MjDKomK4fqI+JXlG66NcnnlIzSaQJAUMPF
-aGQ4hnq/pjBozdKS3K18scnJMZAcVVrAQZjsA/9MEkm1eS0k63X++j6c1I/kLWaC
-qvbJENryfqpN26fmlQJARRGooquSpvJCs38Jja5FJeXGJJ6A6li110R/hEdrTdrw
-80xgW50YZLKJLB6yYDVY75BvtRLXDtd7SmKsOLQSgA==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 -----END RSA PRIVATE KEY-----

data/spec/fixtures/ssl/127.0.0.1.pem

@@ -1,48 +1,69 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 3 (0x3)
-    Signature Algorithm: sha256WithRSAEncryption
+        Serial Number: 5 (0x5)
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Apr 19 22:31:22 2029 GMT
+            Not After : Apr 18 18:46:23 2031 GMT
         Subject: CN=127.0.0.1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:98:34:bb:6c:44:52:00:23:29:ae:bb:7c:c9:91:
-                    ec:6b:1c:83:b1:db:6c:b6:1b:12:fb:e3:f4:e4:20:
-                    27:6c:c7:50:f9:ac:ef:f8:7a:de:00:4a:01:cb:ba:
-                    9b:be:35:3c:e5:33:ef:32:79:61:1c:a6:70:23:19:
-                    16:19:ae:33:e5:96:0a:70:3d:81:2f:b3:59:64:89:
-                    45:ef:86:97:4d:00:9b:1d:68:9e:8d:5e:75:fb:69:
-                    c0:1b:b2:06:1d:97:1a:27:30:38:3e:4f:11:04:70:
-                    70:98:c1:6a:fc:93:a5:17:0f:fb:fe:42:31:af:f3:
-                    6a:bc:51:dc:33:86:be:5f:c9
+                    00:ac:e5:d9:12:cd:61:69:66:ca:b9:6d:cf:b7:b5:
+                    be:b9:21:de:d5:7d:dd:35:bc:c7:2a:23:a3:46:11:
+                    ad:a7:23:02:f9:d1:71:ec:8c:34:c2:9b:bb:dd:6b:
+                    b4:1f:4c:01:e9:c3:55:f4:ad:aa:17:24:ce:03:59:
+                    54:fc:ce:f0:c0:c0:df:1e:89:b2:99:45:8d:49:cd:
+                    68:7e:77:00:65:c2:ed:4a:90:fc:18:d7:50:3c:21:
+                    28:a8:93:a1:47:ee:58:da:09:47:7d:67:70:a7:a8:
+                    83:ea:38:d8:97:96:fd:f0:b7:17:3b:ab:fc:db:2b:
+                    80:cf:e4:eb:4a:0f:0c:80:b0:18:d0:44:9a:6e:74:
+                    70:a3:26:35:98:ad:f5:0c:b1:47:43:57:8a:ac:08:
+                    30:b7:a0:9a:77:60:07:70:69:ef:50:9d:06:85:90:
+                    20:71:67:2e:f5:c8:b0:1b:b2:fd:ff:57:4b:b6:0e:
+                    18:d9:7b:95:e1:12:6b:fa:d2:8b:70:f8:1a:d3:36:
+                    8d:c8:91:e0:d1:75:5a:21:17:f7:fe:70:e8:46:14:
+                    d8:e1:f2:77:7d:21:76:0c:3b:e4:02:b9:d7:18:ac:
+                    86:a3:1e:33:fc:34:72:c6:ea:7f:20:fe:39:74:cf:
+                    ff:89:47:47:45:e1:71:13:46:7e:84:8c:23:2e:41:
+                    1d:87
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Alternative Name: 
                 DNS:127.0.0.1, DNS:127.0.0.2
     Signature Algorithm: sha256WithRSAEncryption
-         a0:40:1e:cc:ed:75:47:4b:3a:a6:05:fb:a6:29:22:cd:f9:28:
-         4c:f3:3d:0c:e2:df:6c:91:68:52:1b:df:d4:9d:88:36:e9:db:
-         ca:94:a4:14:d9:2a:bb:b6:f7:a9:4a:70:f7:db:d7:86:e4:82:
-         e4:dd:08:77:03:7b:fb:99:24:fd:15:44:b5:05:dd:b3:ff:dc:
-         e0:b4:e8:92:7f:58:b3:2f:48:ba:80:c9:a6:1c:c8:8e:99:e1:
-         52:f4:52:90:ad:44:8b:89:39:a1:51:67:15:99:a2:f5:76:75:
-         b4:12:f5:5e:99:e7:8b:7b:b1:9d:04:63:31:33:36:0d:a8:67:
-         00:42
+         7f:f0:00:00:e5:c3:8d:d1:bf:5a:6c:d5:36:86:8a:08:b6:dc:
+         26:b8:4e:af:25:5a:6b:e2:04:50:fe:b1:9a:4b:03:c2:d7:9b:
+         7b:6d:3c:51:a9:2b:d2:b1:53:ae:02:df:de:65:a5:95:38:a7:
+         72:ac:86:5d:af:fb:67:9a:5f:48:7b:ab:05:54:ea:4d:bf:be:
+         d0:45:2b:84:26:4c:c5:62:a8:62:bb:46:5d:6b:e4:b9:aa:1f:
+         b7:3d:44:32:ea:c5:b4:d1:3b:e3:ca:7f:47:46:f0:47:10:a5:
+         7a:93:65:23:e7:6b:42:2e:52:7f:4e:9d:89:b8:8c:26:de:8e:
+         b4:63:be:28:83:2e:06:6a:e6:fc:80:24:de:8a:3f:ab:2d:b6:
+         98:2e:60:d0:36:40:cc:52:1b:c9:1b:12:14:ee:2e:29:3f:5d:
+         57:6b:17:b0:23:57:e5:f0:64:03:ab:86:3c:1b:4f:d8:3a:27:
+         18:b2:82:4e:dc:ca:47:cf:d0:30:a2:d2:48:5a:89:f5:a2:93:
+         29:df:fb:dc:c4:a2:ee:40:2b:14:30:cb:ff:ff:a7:df:34:6a:
+         54:ae:47:0a:5b:e0:c4:9d:7c:0a:14:16:96:b3:8c:5c:d8:22:
+         50:2b:b4:59:01:6a:de:90:14:ea:5a:4d:eb:69:ee:bd:35:e3:
+         e6:5a:8b:68
 -----BEGIN CERTIFICATE-----
-MIIBvzCCASigAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTI5MDQxOTIyMzEyMlowFDESMBAGA1UEAwwJ
-MTI3LjAuMC4xMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCYNLtsRFIAIymu
-u3zJkexrHIOx22y2GxL74/TkICdsx1D5rO/4et4ASgHLupu+NTzlM+8yeWEcpnAj
-GRYZrjPllgpwPYEvs1lkiUXvhpdNAJsdaJ6NXnX7acAbsgYdlxonMDg+TxEEcHCY
-wWr8k6UXD/v+QjGv82q8Udwzhr5fyQIDAQABoyMwITAfBgNVHREEGDAWggkxMjcu
-MC4wLjGCCTEyNy4wLjAuMjANBgkqhkiG9w0BAQsFAAOBgQCgQB7M7XVHSzqmBfum
-KSLN+ShM8z0M4t9skWhSG9/UnYg26dvKlKQU2Sq7tvepSnD329eG5ILk3Qh3A3v7
-mST9FUS1Bd2z/9zgtOiSf1izL0i6gMmmHMiOmeFS9FKQrUSLiTmhUWcVmaL1dnW0
-EvVemeeLe7GdBGMxMzYNqGcAQg==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 -----END CERTIFICATE-----

data/spec/fixtures/ssl/bad-basic-constraints.pem

@@ -1,26 +1,35 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 8 (0x8)
-    Signature Algorithm: sha256WithRSAEncryption
+        Serial Number: 10 (0xa)
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Apr 19 22:31:22 2029 GMT
+            Not After : Apr 18 18:46:23 2031 GMT
         Subject: CN=Test CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:d0:b3:d8:3f:2b:c0:45:8c:f0:3d:96:58:2c:5e:
-                    0e:6a:46:81:ab:10:2f:22:9c:7c:69:f0:61:b7:2d:
-                    f2:2f:46:97:d5:d9:1b:08:c8:c9:e8:18:a5:d8:89:
-                    27:a7:80:cb:0a:8e:ee:26:32:89:70:37:2b:bf:6f:
-                    7e:ee:12:7d:49:c7:0c:19:46:7c:65:99:dc:1f:1a:
-                    31:af:ab:87:01:b3:68:8a:5b:51:a7:78:ca:cc:1d:
-                    7c:26:b4:27:5f:67:75:99:7e:9f:16:ed:88:b3:8f:
-                    77:0f:b3:e8:b3:97:bc:70:8b:ec:62:b9:a2:47:4b:
-                    ef:dc:af:d4:9f:3d:17:cd:03
+                    00:dd:a5:83:44:db:51:be:98:ef:b1:63:a7:04:b9:
+                    ff:cd:71:d3:06:76:c4:25:68:e8:ea:ef:c5:b4:f9:
+                    c2:76:aa:c0:1b:1b:0f:44:13:da:db:cf:d4:f4:88:
+                    5c:cc:ac:f2:76:fb:9e:b6:2e:40:da:b8:c1:c8:cd:
+                    24:90:63:10:6c:99:ee:0c:10:74:cc:38:b8:f3:b4:
+                    d9:ed:1e:ac:07:29:b4:fe:f1:16:c2:18:7c:34:fd:
+                    50:25:0f:f7:45:84:e0:4b:21:41:a4:5b:19:42:85:
+                    a3:a8:d3:6a:ea:0f:80:f3:1a:06:f8:aa:31:4b:e5:
+                    44:a8:37:80:d1:1b:01:ae:f3:b8:35:c6:3f:10:82:
+                    84:fc:59:d9:47:d6:a9:e3:5e:f3:9f:89:23:6a:ed:
+                    bc:92:6a:a1:49:2c:99:c3:89:b3:ab:3a:9f:6b:2d:
+                    e6:39:95:15:e0:71:5f:6b:6a:23:2e:bc:cd:40:b2:
+                    47:42:13:f4:f5:e7:43:76:5c:db:9d:10:3b:91:10:
+                    cc:c7:27:db:a8:18:53:c9:50:eb:83:39:80:98:bf:
+                    c0:cf:75:a8:31:56:2c:0f:32:44:b0:b8:2d:22:f9:
+                    f6:a2:d6:0b:cf:5f:a2:89:7c:15:97:a9:01:5c:97:
+                    6a:b9:9c:c2:aa:fd:a3:d9:aa:61:04:65:e4:13:7e:
+                    58:7d
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -28,32 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                2C:25:19:A1:6C:B3:F7:69:FD:76:9B:3A:22:CB:0C:56:01:01:F1:31
+                61:DF:EE:CE:DA:49:6B:5E:F3:EF:94:FE:F9:DC:C7:C0:5A:74:FE:DB
             Netscape Comment: 
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier: 
-                keyid:2C:25:19:A1:6C:B3:F7:69:FD:76:9B:3A:22:CB:0C:56:01:01:F1:31
+                keyid:61:DF:EE:CE:DA:49:6B:5E:F3:EF:94:FE:F9:DC:C7:C0:5A:74:FE:DB
 
     Signature Algorithm: sha256WithRSAEncryption
-         12:60:01:ec:ea:6c:bc:d6:4e:e7:40:b6:9f:cd:8c:6e:6d:42:
-         4f:d8:db:42:f8:8d:04:09:48:ad:22:50:e5:de:7f:ec:d5:19:
-         21:3f:6b:d0:85:d4:75:20:18:a7:cc:a0:7c:b2:08:6f:d6:7b:
-         a7:63:22:25:1b:f8:20:66:ea:b7:40:09:25:05:7b:61:6d:a1:
-         4f:af:72:51:c9:c8:42:87:04:ab:6e:b6:98:ed:f9:9c:98:64:
-         dc:78:e0:f1:21:16:46:93:67:89:af:a7:da:b4:8d:b7:11:a8:
-         9a:9b:66:be:a4:7f:71:84:57:b4:2b:3c:56:e0:37:f9:6a:29:
-         cd:4a
+         86:10:78:cb:49:09:83:84:9c:7f:33:c8:fc:08:d6:db:02:b7:
+         d3:e7:6b:62:3a:fd:37:d6:b8:a7:5c:8c:42:fb:b0:d6:de:5c:
+         5b:47:2c:22:05:e3:9b:05:2d:96:23:96:2f:40:c7:22:aa:32:
+         5d:b9:73:31:44:c2:60:f1:e5:d8:a3:c1:38:68:ec:37:4e:b0:
+         da:5e:88:b6:64:6b:8d:c3:fc:bd:08:df:81:f9:16:5a:27:1b:
+         3e:7d:8c:ac:7c:59:52:b9:cd:f3:77:1a:dc:fe:4e:92:cd:2b:
+         29:1e:0b:ea:1a:90:a4:da:39:06:52:6f:15:db:58:58:b1:9f:
+         7a:3f:e2:a1:b2:8e:ce:32:e2:5c:f4:55:0d:21:0a:53:35:ce:
+         50:fd:98:6a:c1:1f:72:83:69:a3:43:0b:3b:f5:36:76:5e:c3:
+         cb:1d:47:51:a0:e4:1f:1f:2a:ce:8e:8c:da:41:ce:4b:ea:47:
+         2d:36:d5:2d:d5:e0:44:39:4d:07:1e:79:65:5c:69:46:1a:9a:
+         12:ba:ce:55:9c:73:ed:75:51:30:db:71:f9:34:87:08:ec:a0:
+         23:6e:c3:8e:da:81:4f:3d:3b:70:42:a6:f8:16:82:03:17:ca:
+         ba:73:4a:8d:34:36:c1:b6:2a:ef:85:89:26:2a:a2:34:db:fc:
+         c9:b8:1b:0b
 -----BEGIN CERTIFICATE-----
-MIICLzCCAZigAwIBAgIBCDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTI5MDQxOTIyMzEyMlowEjEQMA4GA1UEAwwH
-VGVzdCBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA0LPYPyvARYzwPZZY
-LF4OakaBqxAvIpx8afBhty3yL0aX1dkbCMjJ6Bil2Iknp4DLCo7uJjKJcDcrv29+
-7hJ9SccMGUZ8ZZncHxoxr6uHAbNoiltRp3jKzB18JrQnX2d1mX6fFu2Is493D7Po
-s5e8cIvsYrmiR0vv3K/Unz0XzQMCAwEAAaOBlDCBkTAMBgNVHRMBAf8EAjAAMA4G
-A1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQULCUZoWyz92n9dps6IssMVgEB8TEwMQYJ
-YIZIAYb4QgENBCQWIlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUw
-HwYDVR0jBBgwFoAULCUZoWyz92n9dps6IssMVgEB8TEwDQYJKoZIhvcNAQELBQAD
-gYEAEmAB7OpsvNZO50C2n82Mbm1CT9jbQviNBAlIrSJQ5d5/7NUZIT9r0IXUdSAY
-p8ygfLIIb9Z7p2MiJRv4IGbqt0AJJQV7YW2hT69yUcnIQocEq262mO35nJhk3Hjg
-8SEWRpNnia+n2rSNtxGomptmvqR/cYRXtCs8VuA3+WopzUo=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 -----END CERTIFICATE-----