# go to openvpn folder
cd /usr/local/etc/openvpn/easy-rsa/
 
# create client cert request
/usr/local/etc/openvpn/easy-rsa/easyrsa gen-req [clientname]
 
# sign the client certificate
/usr/local/etc/openvpn/easy-rsa/easyrsa sign client [clientname]

combine the ca cert, user cert, ta cert and user private key into the ovpn file as a single file