Document ca_location parameter
Fix dns_alt_names parameter

Previously, it wasn't being passed through and it was missing an
important default necessary for when standing up a Puppet master which
will be behind a load balancer, or otherwise not being directly
contacted by agents.