client
dev tun
proto tcp
verify-x509-name "CN=*.redfirephotos.com"
route remote_host 255.255.255.255 net_gateway
resolv-retry infinite
nobind
persist-key
persist-tun
<ca>
Bag Attributes
    friendlyName: CN=Encryption Everywhere DV TLS CA - G1,OU=www.digicert.com,O=DigiCert Inc,C=US
subject=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=Encryption Everywhere DV TLS CA - G1
issuer=/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
-----BEGIN CERTIFICATE-----
MORE CERTIFICATE STUFF
-----END CERTIFICATE-----
# alias=DigiCert Global Root CA
# trust=
# openssl-trust=
-----BEGIN CERTIFICATE-----
OTHER CERTIFICATE STUFF HERE
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
CERTIFICATE STUFF HERE
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----
KEY STUFF HERE

-----END RSA PRIVATE KEY-----
</key>
auth-user-pass
cipher AES-256-CBC
auth SHA384
comp-lzo no
route-delay 4
auth-nocache
verb 4
reneg-sec 0
remote XXX.XXX.XXX.XXX 5443