This regressed in commit 94345ebac6d79a890efc5f49e136c4f76ddda3ef
PUP-1407 PR (2238): puppet CA generates CRL that does not conform to RFC5280
PUP-1409 add an authorityKeyIdentifier extension to node certificates
Puppet PR/2237