Your puppetmaster is calling itself "one of centos, DNS:centos,
DNS:puppet", but you're expecting to talk to
"
puppetmasterappd.eng.vmware.com". Therefore your agent refuses to talk
to this server.
Use the "certname" configuration directive or fix the hostname of the
puppetmaster to generate and use certificates matching the required
hostnames.
Regards, David