I was able to successfully configure and connect with L2TP/IPSEC/NAT-T/PSK from a windows7 client.
Using ROS5.14
Next i tried to setup a rsa signature mode for ipsec peer.
I created a CA, server and client rsa cert/key pairs (pem format for mikrotik), imported the CA.crt, server and client cert/key pairs into mikrotik and only the client key/cert into windows. I end up with "failed to get peers CERT" on mikrotik side.
The windows client is just standing there and trying to reconnect but no luck...
What am I missing?

Thanks