Changed fqdn to ::clientcert since Puppet recommends that.