Simple example of deleting a cert via the HTTP API https://docs.puppet.com/puppet/latest/http_api/http_certificate_status.html#delete

delete-cert.sh

#!/bin/bash

CERTNAME=$(puppet master --configprint certname)

# Revoke

curl \
--verbose \
-X PUT \
-H "Content-Type: text/pson" \
--data '{"desired_state":"revoked"}' \
--cert /etc/puppetlabs/puppet/ssl/certs/$CERTNAME.pem \
--key /etc/puppetlabs/puppet/ssl/private_keys/$CERTNAME.pem \
--cacert /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem \
https://$CERTNAME:8140/production/certificate_status/erica_sivak

# Delete

curl -X DELETE \
--verbose \
-H "Accept: pson" \
--cert /etc/puppetlabs/puppet/ssl/certs/$CERTNAME.pem \
--key /etc/puppetlabs/puppet/ssl/private_keys/$CERTNAME.pem \
--cacert /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem \
https://$CERTNAME:8140/production/certificate_status/erica_sivak

tested with

puppet cert generate erica_sivak
./delete-cert.sh
puppet cert --list --all | grep erica_sivak -c
0