https://github.com/OpenVPN/easy-rsa/releases

.\\EasyRSA-Start.bat

./easyrsa init-pki

./easyrsa build-ca nopass

./easyrsa --san=DNS:server build-server-full server nopass

./easyrsa build-client-full client1.domain.tld nopass

exit

mkdir C:\\vpn
copy pki\\ca.crt C:\\vpn
copy pki\\issued\\server.crt C:\\vpn
copy pki\\private\\server.key C:\\vpn
copy pki\\issued\\client1.domain.tld.crt C:\\vpn
copy pki\\private\\client1.domain.tld.key C:\\vpn
cd C:\\vpn

• Linux

aws acm import-certificate \\
    --certificate fileb://server.crt \\ 
    --private-key fileb://server.key \\
    --certificate-chain fileb://ca.crt

• Window

aws acm import-certificate `
    --certificate fileb://server.crt `
    --private-key fileb://server.key `
    --certificate-chain fileb://ca.crt