katello-change-hostname -u admin -p changeme -c /cert/changed.example.com.crt -k /cert/changed.example.com.key -r /cert/changed.example.com.crt.req -b /cert/cacert.crt  -y changed.example.com
openssl x509 -text -noout -in cert.crt
openssl s_client -connect $HOSTNAME:443 -CAfile /etc/puppet/ssl_ca.pem