Issuer:
...
Subject: CN=08:00:27:6B:52:F3-08-00-27-25-34-89
The issuer is completely empty.
... VERIFY ERROR: depth=1, could not extract X509 subject string from certificate
It looks like OpenVPN does not likecannot deal with an empty issuer.
To ensureThis is not unexpected since an empty issuer has some valuedoes not make much sense. Thus, fillwhoever created the valuesCA certificate should make sure that the subject of country code, state, city, common name, organization name, organization unit name & email asked during creationthe CA certificate (and thus the issuer of the issued certificate) has a subject which describes the issuer instead of just leaving all the fields (common name, ...) empty.