Should you be working with Ethernet bridging, you have to use server-bridge and dev tap instead of server and dev tun.
Now all connecting shoppers may have their customer certificates confirmed from the CRL, https://eternalbookmarks.com/story18060735/vpn-shop-no-further-a-mystery