The config file I have to import into the clients, contains a certificate and a private key. A "ca" section and a "tls auth" section

Whenever I regenerate it, renew it, the "ca" and the "tls auth" sections remain the same