cd /usr/share/easyrsa
/usr/share/easy-rsa/easyrsa renew "certificate-name"
rsync /usr/share/easy-rsa/pki/issued/certificate-name.crt marcus@host:/tmp/
mv /tmp/certificate-name.crt /etc/openvpn/pamero/
/etc/init.d/openvpn restart