Hey everyone,

could I create a certificate to use with OpenVPN without a static WAN IP?
I was wondering if I could do it with the default mikrotik DDNS utiliy.

I am not sure if that will cause issues in the future if my IP changes, or if there is any steps in this case to do.

Thanks in advance for the help!

Yes, if you'll have IP->Cloud DDNS hostname pointing to your router, you can use your xxx.sn.mynetname.net as certificate's CN. Even better, in case you also have own domain name, you can create yourrouter.yourdomain.tld as CNAME pointing to xxx.sn.mynetname.net, and only update that in case you'd need to change router (because new one would have different yyy.sn.mynetname.net).