The Web Server certificates part of the AS product could be made a little more novice friendly. Current version doesn't even have an option to use the control panel to generate a private key and CSR.
Even better would be if there was an option to give a fully qualified DNS name which points to the OpenVPN AS server and then a button for it to do all the rest for enrolling and renewing Let's Encrypt certificates.