client

dev tun
proto tcp
sndbuf 0
rcvbuf 0
remote sg5.serverssl.us 465
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
key-direction 1
setenv opt block-outside-dns
cipher AES-256-CBC
auth SHA512
fast-io
pull
route-delay 2
redirect-gateway
comp-lzo
auth-user-pass
keepalive 10 120
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
 Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston,
OU=MyOrganizationalUnit, CN=Fort-Funston
CA/name=EasyRSA/emailAddress=me@myhost.mydomain
Validity
Not Before: May 29 02:23:00 2019 GMT
Not After : May 26 02:23:00 2029 GMT
Subject: C=US, ST=CA, L=SanFrancisco, O=Fort-Funston,
OU=MyOrganizationalUnit, CN=client1/name=EasyRSA/emailAddress=me@myhost.mydomain
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:ce:f1:5f:09:bf:c4:6a:4c:03:a1:17:d4:99:1a:
bd:dd:45:63:6a:b9:cd:77:76:a8:4c:a2:ee:56:a3:
96:dc:de:b3:35:6f:4a:e7:cc:60:88:6d:cd:9d:0a:
ff:09:6f:0b:3e:7c:7d:3b:6e:37:26:0d:e5:57:0f:
7e:37:98:58:00:98:b0:c4:a5:04:48:8e:7f:84:5c:
c4:d1:0e:29:0b:98:26:8a:ab:a7:1e:fd:4f:e4:5d:
03:b3:e9:de:e8:26:b2:2f:c1:83:21:ba:2f:ef:97:
1c:99:e8:6a:22:eb:49:1b:60:16:1e:4d:f6:9e:98:
60:6f:50:77:49:73:1f:a1:90:fc:41:31:c4:22:75:
91:74:0a:a6:db:a4:f0:9a:a0:bb:a2:b2:74:a1:f0:
aa:4b:66:4e:12:d3:3c:5a:6f:92:b9:75:de:10:52:
58:b9:23:8e:87:f2:a0:cf:a1:97:13:a3:b7:87:2c:
02:71:bd:12:48:a4:5f:97:6f:4e:d0:b4:19:04:e8:
30:34:b3:2f:8f:28:46:e1:40:48:ff:53:d5:13:21:
ac:05:1b:cd:18:6d:cb:74:7f:b7:58:85:e1:02:f5:
3a:67:aa:69:58:ff:c2:05:62:c6:39:23:8a:26:8d:
75:a9:62:a9:30:80:bc:52:8e:65:32:7b:6a:55:5c:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
Easy-RSA Generated Certificate
X509v3 Subject Key Identifier:
55:E9:A9:E8:56:16:0F:05:71:DB:8B:93:A2:0D:41:0C:3F:3B:A3:A4
X509v3 Authority Key Identifier:
keyid:79:95:8C:DD:78:37:1A:FA:02:21:2D:62:D2:4D:FB:05:6D:4B:5D:51
DirName:/C=US/ST=CA/L=SanFrancisco/O=Fort-
Funston/OU=MyOrganizationalUnit/CN=Fort-Funston
CA/name=EasyRSA/emailAddress=me@myhost.mydomain
serial:A6:FA:AC:CE:F4:4E:49:69

X509v3 Extended Key Usage:

TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
X509v3 Subject Alternative Name:
DNS:client1
Signature Algorithm: sha256WithRSAEncryption
3a:82:d8:72:06:92:8e:8e:0c:ab:94:a1:80:4d:de:3e:68:8e:
a6:4b:c7:ec:ff:97:bf:ab:5f:12:59:1e:96:d1:75:ad:71:63:
17:74:59:8e:54:57:8c:c5:30:c3:5a:78:ef:96:b4:18:f6:23:
e0:c8:f7:4f:bf:92:e8:cc:f7:0f:ab:31:74:3f:70:41:5c:61:
2a:0f:9b:c0:30:0e:68:cf:71:79:db:36:ed:07:55:11:ff:ff:
 d8:5a:0b:c9:a4:48:eb:62:f6:aa:d9:ee:b9:10:9f:3b:55:ee:
57:70:1f:8c:32:e2:4a:00:98:85:e0:56:8f:79:4a:e6:e8:cd:
38:6d:80:22:b3:fd:26:8e:38:59:9d:f6:af:16:c8:39:6c:76:
8e:03:ac:ef:36:af:30:de:0b:8d:96:9c:02:c7:e3:3f:68:b0:
59:f5:f4:3f:e5:43:2b:6d:47:76:90:89:a3:ca:0c:04:d8:79:
a1:ca:30:31:43:b6:c9:03:b4:ee:b9:68:d1:5a:7f:ad:12:88:
ee:16:2e:20:0f:d9:50:d8:37:84:e0:89:51:1f:6a:b7:89:2b:
6e:dc:78:60:a3:a6:00:f0:46:c1:34:3d:0a:63:ed:cb:40:e7:
be:92:39:6e:b2:5c:af:51:61:c8:3e:e9:34:fa:ff:8c:32:b8:
6b:1f:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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dr2t0VNWtnwvcG5r4Um9F5r8Ftng42uAOQJPg5V8zERNgIvEU987QiHhmyByqcb6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-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
8730006a8c8ae017d7def66ac6cd1e81
d2fa3933177febc374a6f547532139d3
37e6693ad6dcc182bcd0a1ff6da5205f
20481b268b0d77d48c82cc35d1400cd5
26706bd5af97b6d8fc36896a41790078
9cdc138034151bba396eb948929430a4
59d40f128563a10b4e4b7d1fe5226b24
9f70e9505b4e95ae48e57e12ea776660
ff45f61d4ffe32dd0da19bd888fc58c1
889f88ad611272d599b56107e55ca6be
e67d8ae78eb3906e417331ba91b5738a
99154a379cdbf88ee48b0c9a67215c2f
3cb068f9c0140f7e129a0247184dc85c
cd59e0e7177f051d74218d2a5881694f
cd49daf828c7121b10f98703cc437001
a2c8a0681d7b0508bed04daac8a06620
-----END OpenVPN Static key V1-----
</tls-auth>