puppet certificates are generated using downcase names