puppet 6.3.0-universal-darwin → 6.4.0-universal-darwin

data/man/man5/puppet.conf.5

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPETCONF" "5" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPETCONF" "5" "March 2019" "Puppet, Inc." "Puppet manual"
 \fBThis page is autogenerated; any changes will get overwritten\fR
 .
 .SH "Configuration settings"
@@ -876,7 +876,7 @@ The time to wait for data to be read from an HTTP connection\. If nothing is rea
 The HTTP User\-Agent string to send when making network requests\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: Puppet/6\.3\.0 Ruby/2\.4\.1\-p111 (x86_64\-linux)
+\fIDefault\fR: Puppet/6\.4\.0 Ruby/2\.4\.1\-p111 (x86_64\-linux)
 .
 .IP "" 0
 .
@@ -1081,7 +1081,10 @@ The directory in which to store log files
 .IP "" 0
 .
 .SS "manage_internal_file_permissions"
-Whether Puppet should manage the owner, group, and mode of files it uses internally
+Whether Puppet should manage the owner, group, and mode of files it uses internally\.
+.
+.P
+\fBNote\fR: For Windows agents, the default is \fBfalse\fR for versions 4\.10\.13 and greater, versions 5\.5\.6 and greater, and versions 6\.0 and greater\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: true

data/man/man8/puppet-agent.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-AGENT" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-AGENT" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-agent\fR \- The puppet agent daemon

data/man/man8/puppet-apply.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-APPLY" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-APPLY" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-apply\fR \- Apply Puppet manifests locally

data/man/man8/puppet-catalog.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CATALOG" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-CATALOG" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-catalog\fR \- Compile, save, view, and convert catalogs\.

data/man/man8/puppet-config.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CONFIG" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-CONFIG" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-config\fR \- Interact with Puppet\'s settings\.

data/man/man8/puppet-describe.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-DESCRIBE" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-DESCRIBE" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-describe\fR \- Display help about resource types

data/man/man8/puppet-device.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-DEVICE" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-DEVICE" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-device\fR \- Manage remote network devices

data/man/man8/puppet-doc.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-DOC" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-DOC" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-doc\fR \- Generate Puppet references

data/man/man8/puppet-epp.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-EPP" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-EPP" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-epp\fR \- Interact directly with the EPP template parser/renderer\.

data/man/man8/puppet-facts.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-FACTS" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-FACTS" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-facts\fR \- Retrieve and store facts\.

data/man/man8/puppet-filebucket.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-FILEBUCKET" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-FILEBUCKET" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-filebucket\fR \- Store and retrieve files in a filebucket
@@ -67,8 +67,12 @@ Use the local filebucket\. This uses the default configuration information and t
 Use a remote filebucket\. This uses the default configuration information and the bucket located at the \'$bucketdir\' setting by default\.
 .
 .TP
+\-\-server_list
+A list of comma seperated servers; only the first entry is used for file storage\. This setting takes precidence over \fBserver\fR\.
+.
+.TP
 \-\-server
-The server to send the file to, instead of locally\.
+The server to use for file storage\. This setting is only used if \fBserver_list\fR is not set\.
 .
 .TP
 \-\-todate

data/man/man8/puppet-generate.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-GENERATE" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-GENERATE" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-generate\fR \- Generates Puppet code from Ruby definitions\.

data/man/man8/puppet-help.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-HELP" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-HELP" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-help\fR \- Display Puppet help\.

data/man/man8/puppet-key.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-KEY" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-KEY" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-key\fR \- Create, save, and remove certificate keys\.

data/man/man8/puppet-lookup.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "LOOKUP" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "LOOKUP" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBlookup\fR \- Interactive Hiera lookup

data/man/man8/puppet-man.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-MAN" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-MAN" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-man\fR \- Display Puppet manual pages\.

data/man/man8/puppet-module.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-MODULE" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-MODULE" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-module\fR \- Creates, installs and searches for modules on the Puppet Forge\.

data/man/man8/puppet-node.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-NODE" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-NODE" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-node\fR \- View and manage node definitions\.

data/man/man8/puppet-parser.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-PARSER" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-PARSER" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-parser\fR \- Interact directly with the parser\.

data/man/man8/puppet-plugin.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-PLUGIN" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-PLUGIN" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-plugin\fR \- Interact with the Puppet plugin system\.

data/man/man8/puppet-report.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-REPORT" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-REPORT" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-report\fR \- Create, display, and submit reports\.

data/man/man8/puppet-resource.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-RESOURCE" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-RESOURCE" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-resource\fR \- The resource abstraction layer shell

data/man/man8/puppet-script.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-SCRIPT" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-SCRIPT" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-script\fR \- Run a puppet manifests as a script without compiling a catalog

data/man/man8/puppet-ssl.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-SSL" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-SSL" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-ssl\fR \- Manage SSL keys and certificates for puppet SSL clients
@@ -34,6 +34,10 @@ puppet ssl \fIaction\fR [\-h|\-\-help] [\-v|\-\-verbose] [\-d|\-\-debug] [\-\-lo
 .SH "ACTIONS"
 .
 .TP
+bootstrap
+Perform all of the steps necessary to request and download a client certificate\. If autosigning is disabled, then puppet will wait every \fBwaitforcert\fR seconds for its certificate to be signed\. To only attempt once and never wait, specify a time of 0\. Since \fBwaitforcert\fR is a Puppet setting, it can be specified as a time interval, such as 30s, 5m, 1h\.
+.
+.TP
 submit_request
 Generate a certificate signing request (CSR) and submit it to the CA\. If a private and public key pair already exist, they will be used to generate the CSR\. Otherwise a new key pair will be generated\. If a CSR has already been submitted with the given \fBcertname\fR, then the operation will fail\.
 .

data/man/man8/puppet-status.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-STATUS" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-STATUS" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-status\fR \- View puppet server status\.

data/man/man8/puppet.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET" "8" "February 2019" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET" "8" "March 2019" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\fR
@@ -25,4 +25,4 @@ Specialized:
 catalog Compile, save, view, and convert catalogs\. describe Display help about resource types device Manage remote network devices doc Generate Puppet references epp Interact directly with the EPP template parser/renderer\. facts Retrieve and store facts\. filebucket Store and retrieve files in a filebucket generate Generates Puppet code from Ruby definitions\. node View and manage node definitions\. parser Interact directly with the parser\. script Run a puppet manifests as a script without compiling a catalog ssl Manage SSL keys and certificates for puppet SSL clients
 .
 .P
-See \'puppet help \fIsubcommand\fR \fIaction\fR\' for help on a specific subcommand action\. See \'puppet help \fIsubcommand\fR\' for help on a specific subcommand\. Puppet v6\.3\.0
+See \'puppet help \fIsubcommand\fR \fIaction\fR\' for help on a specific subcommand action\. See \'puppet help \fIsubcommand\fR\' for help on a specific subcommand\. Puppet v6\.4\.0

data/spec/fixtures/ssl/127.0.0.1-key.pem

@@ -0,0 +1,67 @@
+Private-Key: (1024 bit)
+modulus:
+    00:bb:e1:47:40:df:d0:06:c2:ef:5b:0b:41:41:01:
+    f8:a3:68:fe:18:82:21:5b:97:b5:7c:25:f2:31:b9:
+    50:09:a8:56:71:4c:81:e5:fe:e0:2b:f3:8d:38:e8:
+    fd:15:c2:a3:5a:db:56:5d:29:49:4d:75:e5:ae:69:
+    a7:a3:ac:19:c6:23:cb:1a:23:57:15:aa:ca:e1:e1:
+    78:79:af:49:15:bf:7d:9a:42:16:bc:b1:18:61:68:
+    d8:e1:34:57:4e:73:a0:90:3e:1f:8a:56:fd:0c:eb:
+    f0:fb:03:fd:ec:1b:ff:15:1f:d7:3e:5c:73:09:15:
+    48:83:e5:ff:4e:b3:ea:3a:a9
+publicExponent: 65537 (0x10001)
+privateExponent:
+    22:7d:7d:b6:24:20:2d:4d:95:e1:31:d4:bd:d9:5d:
+    ca:a9:d8:93:a9:37:f4:77:8a:42:8b:38:c5:f6:0e:
+    02:67:db:ce:9a:cb:f1:eb:f3:3d:3e:4d:bb:97:d1:
+    f6:2f:b0:0b:5a:de:a4:e5:92:66:5c:f1:58:2e:5f:
+    2f:05:c6:09:30:2e:77:0c:07:64:ea:9e:c2:f4:72:
+    b0:f9:31:36:af:45:7e:a5:44:bf:b8:f9:1c:0d:fc:
+    9f:8e:41:08:c4:8e:d0:8d:4e:de:2d:f3:42:c3:d0:
+    6e:ca:70:21:bb:f5:c4:e2:67:13:21:10:5a:0b:68:
+    7b:5d:9f:ea:08:f0:12:3d
+prime1:
+    00:e3:d5:5c:8e:b9:31:28:ce:d3:c0:78:0d:b2:12:
+    0e:14:95:a4:b8:48:20:82:2f:27:37:f5:b8:6e:b4:
+    ec:57:7f:92:c4:23:15:5b:d1:b6:35:20:60:49:36:
+    fb:63:8d:df:34:45:af:07:80:a7:9b:05:2f:43:5e:
+    af:9a:bc:9b:43
+prime2:
+    00:d3:1b:70:e1:ff:2d:af:09:a9:3e:65:04:58:3d:
+    65:11:bd:98:7e:39:26:ab:33:98:37:cf:46:13:2e:
+    6f:dd:48:0e:0c:bb:ee:3a:a7:91:60:81:6f:9f:54:
+    65:2c:cd:8a:6f:27:a5:6a:72:f1:3d:44:9c:b3:eb:
+    b8:56:6f:b5:a3
+exponent1:
+    00:b4:ef:ca:4c:f2:98:2e:ef:6a:cd:8c:ca:5b:a3:
+    e9:18:c1:eb:0a:0b:05:fe:3d:92:68:e7:b5:2b:fe:
+    75:3f:db:e9:e3:e8:74:da:f1:c6:41:94:cf:c2:f5:
+    6e:5a:16:de:af:75:b3:d6:42:7f:59:26:99:ed:67:
+    f2:0f:f2:3f:5f
+exponent2:
+    10:8b:45:fd:70:12:14:75:9d:5d:d6:6c:d0:bd:7e:
+    fe:34:ed:8e:76:cc:20:fe:9a:1f:45:8f:28:51:ab:
+    52:9c:22:fd:bc:7c:9e:fc:22:d8:7d:4c:52:20:3b:
+    0d:97:ce:11:87:f9:de:ad:c3:5a:19:d6:6e:03:3b:
+    1f:0b:02:21
+coefficient:
+    00:a9:b1:a0:81:72:a1:e9:41:51:3e:32:5a:33:aa:
+    20:b1:23:bf:ff:62:53:a7:6d:e2:c1:d5:18:11:57:
+    b6:9e:fd:b2:c5:d8:d8:50:d1:5e:5c:22:ba:14:e3:
+    36:92:34:4c:29:19:dc:a3:60:a8:01:81:00:5b:c1:
+    3b:4e:0f:26:23
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/fixtures/ssl/127.0.0.1.pem

@@ -0,0 +1,48 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test CA
+        Validity
+            Not Before: Jan  1 00:00:00 1970 GMT
+            Not After : Mar  9 21:35:53 2029 GMT
+        Subject: CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:bb:e1:47:40:df:d0:06:c2:ef:5b:0b:41:41:01:
+                    f8:a3:68:fe:18:82:21:5b:97:b5:7c:25:f2:31:b9:
+                    50:09:a8:56:71:4c:81:e5:fe:e0:2b:f3:8d:38:e8:
+                    fd:15:c2:a3:5a:db:56:5d:29:49:4d:75:e5:ae:69:
+                    a7:a3:ac:19:c6:23:cb:1a:23:57:15:aa:ca:e1:e1:
+                    78:79:af:49:15:bf:7d:9a:42:16:bc:b1:18:61:68:
+                    d8:e1:34:57:4e:73:a0:90:3e:1f:8a:56:fd:0c:eb:
+                    f0:fb:03:fd:ec:1b:ff:15:1f:d7:3e:5c:73:09:15:
+                    48:83:e5:ff:4e:b3:ea:3a:a9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:127.0.0.1, DNS:127.0.0.2
+    Signature Algorithm: sha256WithRSAEncryption
+         ba:0d:5c:ae:e4:7b:7f:ec:39:f5:e6:29:ab:6a:bf:65:26:87:
+         04:50:ca:93:f1:ee:7a:65:3a:6b:7c:b2:d7:96:f2:29:19:8a:
+         0d:ed:e3:3d:ed:d1:5d:72:c2:a6:60:bc:13:c6:c0:92:a8:a2:
+         23:3b:35:6b:58:a5:c4:7c:74:88:1a:00:bd:47:0f:c8:4b:4d:
+         f6:2c:16:61:1c:9a:b9:b6:be:28:0e:41:17:df:bc:f3:21:a8:
+         2c:a3:e2:4b:23:e0:2e:06:f3:b6:0e:90:3d:87:8c:da:a8:66:
+         14:7e:03:e2:69:85:0d:a7:a9:d9:b6:25:92:fd:13:e1:e9:71:
+         f9:da
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/ssl/bad-basic-constraints.pem

@@ -0,0 +1,59 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7 (0x7)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test CA
+        Validity
+            Not Before: Jan  1 00:00:00 1970 GMT
+            Not After : Mar  9 21:35:53 2029 GMT
+        Subject: CN=Test CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (1024 bit)
+                Modulus:
+                    00:c8:15:08:03:7c:69:d7:4d:05:f9:81:0c:f3:f1:
+                    77:ed:4a:e8:7c:f7:ac:77:bb:5c:8b:5c:96:31:01:
+                    bf:aa:b4:16:e6:d6:b3:22:15:4b:5c:8e:3c:99:af:
+                    7b:7d:1a:e8:0d:3d:40:14:37:00:f5:37:3a:00:06:
+                    e1:0b:0e:37:b8:76:62:a3:9a:5e:47:d5:d4:2a:4e:
+                    13:50:a9:0c:7a:b1:69:e7:79:9a:30:51:66:0b:e4:
+                    b7:b9:7d:e4:5b:61:19:0b:8f:79:a9:43:b0:a1:ff:
+                    c7:a6:7a:a6:fa:2e:88:28:84:66:68:bf:bf:b6:64:
+                    9e:1e:b7:e7:fe:35:63:65:51
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Key Identifier: 
+                93:70:43:DA:C0:AA:14:71:0F:93:EB:82:E7:F5:AE:C9:D2:1A:78:77
+            Netscape Comment: 
+                Puppet Server Internal Certificate
+            X509v3 Authority Key Identifier: 
+                keyid:93:70:43:DA:C0:AA:14:71:0F:93:EB:82:E7:F5:AE:C9:D2:1A:78:77
+
+    Signature Algorithm: sha256WithRSAEncryption
+         75:cc:05:b2:d8:43:aa:99:84:5d:64:0b:ac:cc:af:07:a7:0d:
+         90:79:9f:c9:dc:09:e6:59:d8:d1:c2:0e:2a:96:ab:80:38:f8:
+         1a:1d:d1:e2:0c:c0:fa:df:c0:cf:0c:78:30:ac:d0:b7:e9:88:
+         31:d6:05:29:41:8f:2e:32:f2:98:74:fc:19:4b:d8:c5:36:c3:
+         7a:a7:ae:8c:65:b0:4b:f0:fb:f8:86:ad:08:53:43:8f:f5:52:
+         a0:9b:cf:e8:2d:60:57:4f:f3:ab:63:3c:f2:23:da:d0:5a:de:
+         2f:64:25:c3:4f:ff:51:c9:51:22:38:b4:e6:a6:87:50:a8:ea:
+         9f:f3
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----