IKEv2 with Letsencrypt

RouterOS Beginner Basics
1

I have been busy setting up the IKEv2 connection to an Android with Strongswan. Now I am stuck on an error message on RouterOS and I don’t know why.

Logging:

debug: unable to get issuer certificate(2) at depth:1 SubjectName:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
debug: can't verify peer's certificate from store

All certificates I have imported:
I am on 6.39rc13

2

I am a bit further and it seems Letsencrypt don’t supply that type of certificate that can be used for and I need the 1.3.6.1.5.5.7.3.2 enhanced key. Letsencrypt supplies: 1.3.6.1.4.1.36305.6.1.2.2.1 and 1.3.6.1.4.1.44947.1.1.1.

My source:
https://community.letsencrypt.org/t/letsencrypt-certificates-will-not-allow-windows-xp-clients-to-connect-to-iis/4385

3

Did you manage to get this working?
It would be great.. No need to install cert on user device.. There is also a way to auto renew and import le certs to mikrotik…