puppet cert clean --all, thinking it would only clear the certificates that hadn't been signed yet. There's about 300 nodes that rely on the puppet master. As far as I can tell, puppet agent still works on them, but I think that's because there's a cached copy of the certificate somewhere.
Any way to rectify the situation without having to manually log into 300 different servers?
EDIT: I should mention that /var/lib/puppet wasn't being backed up for some reason.