Finally, I had to refuse using MIkroTik. No solution. it just does not work without client certificate.
All the solutions which can be googled are for SERVER on MikroTik device, not CLIENT on it.
So, server probably ok, but client does not work currently. Pity.