We ended up doing the init procedure as well. I see someone had a post a few days after ours about the same issue.
https://forums.openvpn.net/viewtopic.php?f=24&t=30809
We agree, it is annoying that the console does not show the internal CA's expiration date. We had imported this VPN config from a previous version so we didn't have to reconfigure ever single end user. Not all users are computer savvy. Also with the new client V3 we can't push the same install remotely to clients on a whim without having to touch each user to import the .ovpn file. The older v2 msi works great for pushing to clients and just working.
We are internally working on a script/command to check the internal certs expiration to track for our clients. It would be better if OpenVPN support had an actual step by step procedure in place to help, as the previous linked post stated, not all of us are experts in this area and rebuilding an entire server or having to touch multiple endpoints after fixing is not ideal.
