As a user, I would like a Puppet 6 equivalent Puppet Cert Print command similar to what was available in previous versions of Puppet. The current method requires using OpenSSL as illustrated by the man page:
This is pretty closely related to PUP-7522 which is explicitly asking about the certificate extensions. However, it should be possible to satisfy both of things things in one PR. It would be trivial to emit the exact same output as 5.5.x.But there is an issue with the cert extensions, see my comment in PUP-7522. The long form of cert extensions (eg "Puppet Node Role Name") aren't what you use in a manifest ("pp_role").