Thanks for the information. We are not seeing the '+' sign for a cert request. Please see the attached 2 new screenshots for a test "test.jt" cert request.
In puppetserver ca, there are section markers diving CSRs from signed certs from revoked certs. I'm now realizing that this interacts badly with grep. Run the command without the grep to see what I mean.
Ah I was mistaken earlier. It looks like puppet cert list returns + for signed certs (untidy-keeping.delivery.puppetlabs.net), - for revoked certs (neptune) and no leading symbol for CSR (testing) as Maggie Dreyer said:
# puppet --version
5.5.22
# puppet cert list --all
Warning: `puppet cert` is deprecated and will be removed in a future release.
Adding that information to the puppetserver ca command is filed as SERVER-2252. And the puppet cert command was removed in puppet 7, so I think the remaining issue is the PE console doesn't make the same distinction in the PE UI? So I'll move this ticket to the PE project.