on the foreman server I had to run:
puppet cert clean client-certname
on the client
rm -rf /var/lib/puppet/ssl
puppet agent -td --server=
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certificat...