This is very important under certain situations. For example, when a new node comes up which existed previously, then you should to regenerate the SSL stuff, deleting the local CSR and certificates, and clear the signed certificate in the puppet server too.