;!version 2.17
client
dev tun
;route-noexec
persist-key
;persist-tun

nobind
mssfix 1400
;ns-cert-type server
verb 1
mute 500
auth-user-pass
reneg-sec 0
;remap-usr1 SIGTERM
inactive 1200 50000

hand-window 5
tls-exit

<ca>
-----BEGIN CERTIFICATE-----
## certificate contents go here
-----END CERTIFICATE-----
</ca>