fix the ref to puppet_certificate