As part of SERVER-2287, OID 1.3.6.1.4.1.34380.1.3.39 was designated as the certificate extension that allows a certificate to make REST calls to the CA API:
https://github.com/puppetlabs/puppetserver/blob/6.5.0/src/clj/puppetlabs/puppetserver/certificate_authority.clj#L196-L199
However, this OID was never added to the list of extensions that Puppet's Ruby code recognizes:
https://github.com/puppetlabs/puppet/blob/6.7.2/lib/puppet/ssl/oids.rb
Note that the question around naming raised in SERVER-2357 must be settled before this change is implemented.
Putting this in needs information until the server issue is resolved.
We're not going to do the rename, unless people really really want us to. So I think this should just be worked using the existing name.