PUP-1916 added the ability to clean certificates that have not yet been signed, without having to manually sign/revoke them first. However, this only works if there is at least one signed certificate in the list of certificate names passed to "puppet cert clean".
'puppet cert clean' can now clean certificates even if none of the certificates in the list of certificates it is told to clean have already been signed.