my custom config : resolv-retry infinite; persist-key; persist-tun; remote-cert-tls server; auth-nocache; route-delay 5; explicit-exit-notify 5; key-direction 1; tls-version-min 1.2; Sep 30 05:16:50 openvpn 44278 VERIFY EKU OK Sep 30 05:16:50 openvpn 44278 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Pavonis, emailAddress=info@airvpn.org Sep 30 05:16:51 openvpn 44278 WARNING: 'keydir' is present in local config but missing in remote config, local='keydir 0' Sep 30 05:16:51 openvpn 44278 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Sep 30 05:16:51 openvpn 44278 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Sep 30 05:16:51 openvpn 44278 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Sep 30 06:16:50 openvpn 44278 TLS: tls_process: killed expiring key Sep 30 06:16:51 openvpn 44278 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Sep 30 06:16:51 openvpn 44278 VERIFY KU OK Sep 30 06:16:51 openvpn 44278 Validating certificate extended key usage Sep 30 06:16:51 openvpn 44278 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Sep 30 06:16:51 openvpn 44278 VERIFY EKU OK Sep 30 06:16:51 openvpn 44278 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Pavonis, emailAddress=info@airvpn.org Sep 30 06:16:52 openvpn 44278 WARNING: 'keydir' is present in local config but missing in remote config, local='keydir 0' Sep 30 06:16:52 openvpn 44278 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Sep 30 06:16:52 openvpn 44278 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Sep 30 06:16:52 openvpn 44278 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Sep 30 07:16:51 openvpn 44278 TLS: tls_process: killed expiring key Sep 30 07:16:52 openvpn 44278 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Sep 30 07:16:52 openvpn 44278 VERIFY KU OK Sep 30 07:16:52 openvpn 44278 Validating certificate extended key usage Sep 30 07:16:52 openvpn 44278 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Sep 30 07:16:52 openvpn 44278 VERIFY EKU OK Sep 30 07:16:52 openvpn 44278 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Pavonis, emailAddress=info@airvpn.org Sep 30 07:16:53 openvpn 44278 WARNING: 'keydir' is present in local config but missing in remote config, local='keydir 0' Sep 30 07:16:53 openvpn 44278 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Sep 30 07:16:53 openvpn 44278 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key Sep 30 07:16:53 openvpn 44278 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA