These are settings from my windows 10, which work just fine. Windows connects after I enter my XFINITY username and password (also shows certificate issued by COMODO RSA CA)
I can't find a way to replicate these settings on Mikrotik device (SXTsq 5 ac)
No matter what I tried I get "802.1x authentication failed" error in the logs
Could this be because there is no PAP support in Mikrotik?