client dev tun proto tcp remote us-california.privateinternetaccess.com 501 resolv-retry infinite nobind persist-key persist-tun cipher aes-256-cbc auth sha256 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 crl-verify /etc/openvpn/pia/strong/crl.rsa.4096.pem ca /etc/openvpn/pia/strong/ca.rsa.4096.crt disable-occ