My ISP is rubbish and the state of the internet in the UK seems to be heading to 1984. I've started looking at VPNs and stumbled on IPredator as a cheapy test.
It gives you the option of OpenVPN and provides a guide for Ubuntu.
Part of the guide involves downloading a certificate and its private key. You download it over SSL but the certificate isn't unique to you the user. Anybody can go to that page and download both halves of the key.
This question really comes from not understanding how OpenVPN uses TLS but...
How is the connection secure if a malicious party knows the encryption details and keys?
(Can somebody add the openvpn tag to this? That seems like it should be a valid tag here.)