Thanks, I read the link but it still doesn't clear up my issues. Is there any way you could map it like this using what I listed in the original post replacing the xxxxx's with the names used by my router?
<ca> = xxxxxxxx
</ca>
<cert> = xxxxxxx
</cert>
<key> = xxxxxxxx
</key>
<tls-crypt> = xxxxxxx