nmcli connection add connection.id "VPN" connection.type vpn autoconnect no vpn.service-type org.freedesktop.NetworkManager.openconnect vpn.data "
        protocol = anyconnect,
        authtype = cert,
        gateway = GATEWAY,
        cookie-flags = 2,
        allow_no_stub = yes,
        autoconnect-flags = 0,
        certsigs-flags = 0,
        csd_wrapper = /usr/share/openconnect/csd.sh,
        enable_csd_trojan = yes,
        gateway-flags = 2,
        gwcert-flags = 2,
        lasthost-flags = 0,
        no_xml_post = yes,
        pem_passphrase_fsid = no,
        prevent_invalid_cert = no,
        stoken_source = disabled,
        usercert = /etc/certs/vpn.pem,
        userkey = pkcs11:manufacturer=STMicro;serial=0000000000000000;token=LABEL;id=%64%64%65%63%36%62%38%36%66%30%62%39%32%33%34%33;object=KEY_LABEL;type=private;pin-value=userpin,
  cacert = /etc/certs/ca.pem,
        xmlconfig-flags = 0,
        service-type=org.freedesktop.NetworkManager.openconnect"