(#693) Format the SSL certificate instead of the wrapper

Puppet holds a wrapper around SSL certificates that we need to remove
before trying to format the certificate.