RB950/ROS 6.10: How to get KR flag certificate

Hi!
i try some days to obtain KR flag cerfificate. I use e.g. this howtos:

https://community.openvpn.net/openvpn/wiki/Easy_Windows_Guide
http://wiki.mikrotik.com/wiki/Manual:Create_Certificates

and obtain only KT flag and cant connect to OVPN server on microtic.


I see only difference against manual - in “certificate print” mikrotik/6.10 says:

Flags: K - private-key, D - dsa, L - crl, C - smart-card-key,
A - authority, I - issued, R - revoked, E - expired, T - trusted

but manuals says:

Flags: K - decrypted-private-key, Q - private-key, R - rsa, D - dsa


Is problem in certificates? … may be it is ok and i have problem somewhere else.

… I made it … downgrade to 5.26.

Please … make notice to 6.10 … call him BETA.

I have the same problem.
I get the KT flag and then https on browsers gives errors.
5.26 works

Please some info.