I think it’s something on my side. I set certificates to none and connection is working. No idea yet why certificates don’t work but I’ll dig into that.
One more thing is I’m trying to implement “kill switch” that will block any trafic if VPN is unreachable. My solution seems to be working but can someone take a look if it’s correct or how it can be improved:
/ip firewall mangle add chain=forward out-interface=ovpn-cyberghost action=mark-connection new-connection-mark=vpn-connection
/ip firewall mangle add chain=prerouting in-interface=!ovpn-cyberghost action=mark-connection new-connection-mark=vpn-required
/ip firewall filter add chain=forward connection-mark=vpn-required connection-mark=!vpn-connection action=drop comment="Kill Switch - Block when VPN is down"
//edit
The certificates issue was related to domain case sensitivity in connect-to argument. Silly but it works now 