tar -cvf certs.tar ca.pem <client>
gpg -c certs.tar
rm certs.tar