https://github.com/OpenVPN/easy-rsa/blob/90ef353aed6a9b6f81ccb2edd767bcc6204ca931/easyrsa3/easyrsa#L6046-L6050