"nested asn1 error" when running “puppet cert clean” in Puppet Enterprise 2019.1.x and later

When I run puppet cert clean on my Puppet master, it fails with a nested asn1 error. I can’t clean existing certs or sign new certs. How can I resolve the issue? Error messages Error: Cached certif...