The same thing.
As a result I signed certificates from winbox.
Open winbox - system - certificates.
Open ca certificate - button “sign” - choose itself in field “ca”
Open server certificate - button “sign” - choose ca certificate in field “ca”
Open client certificate - button 'sign" - choose ca certificate in field “ca”