client
proto tcp-client
remote doofar.com 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server name
auth SHA256
auth-nocache
cipher AES-256-CBC
tls-client
tls-version-min 1.2
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIHjME4GCSqGSIb3DQEFDTBBMCkGCSqGSIb3DQEFDDAcBAg9pFsi60nR6AICCAAw
DAYIKoZIhvcNAgkFADAUBggqhkiG9w0DBwQIPBPlCaxRduwEgZCRDLYE8bPDpAUW
a081GF1zA18wCpfiG/H6hker4i0Bb/HyHHpmmU2gf8e2immDvpnGo4s85VyX7Ti1
xJ9cyPjc4kFe3Swcuq8oyvvVJDDVbyM+Eq7FaqNy398444DKOA5EzFshz7kfl49x
QYU7G1R/1xayut/7uM6VcL6WIJ9YT4hJ96nnsRb7tGjt3qIltUM=
-----END ENCRYPTED PRIVATE KEY-----
</key>