Use node['fqdn'] for the master's certname.