Get a list of DNS alt names from a compiler certificate in Puppet Enterprise

When updating DNS for your load balancer or regional DNS server, you can get a list of DNS alt names from its Puppet Enterprise compiler certificate.

Version and installation information

PE version: All supported

Solution

Get a list of DNS alt names from a compiler certificate. On the compiler run:

puppetserver ca list --certname <PRIMARY|REPLICA|COMPILER>

For example:

puppetserver ca list --certname <primary.example.com|replica.example.com|compiler.example.com