Seems strange to mention PuppetDB here.  Is this because we just copied the server's cert that was generated by PuppetDB or something?