cd /usr/share/easyrsa

/usr/share/easy-rsa/easyrsa renew "certificate-name"

rsync /usr/share/easy-rsa/pki/issued/certificate-name.crt marcus@host:/tmp/

mv /tmp/certificate-name.crt /etc/openvpn/pamero/

/etc/init.d/openvpn restart