mdolezal wrote
I know, but it is not safe
and i need to know what happedned
If you want to know why because that is the way how support work on here. the first time you create openvpn server with default setting on create certificate that is basic and work as your system. now you are looking some info from internet and try some more advanced then it not work as you expect. If you and your user want it you have two option here. buy an support some someone can help you or making the whole openvpn server certificate again with adding extension or you must do it by yourselves to make it work . that is the way how open scourge software continuing evolving .you only been given out half of function and if you want more should pay for it.
In order correctly it you need edit openssl config and add entry on KU extension then create certificate again.