Hello, I'm not able to reproduce this issue.
This seems likely to be related to bug #1032060 where the certificate name of "debian-sid." (with a trailing dot) was found to be the cause of PKI issues in puppetserver.
Do you think we can close this as a duplicate of that bug? Thanks, -- Jérôme