root@deployment-puppetdb03:/etc/puppetdb# openssl x509 -in /etc/ssl/certs/Puppet_Internal_CA.pem -text -noout | grep CN
        Issuer: CN = Puppet CA: palladium.eqiad.wmnet
        Subject: CN = Puppet CA: palladium.eqiad.wmnet