IPSEC vpn with certificate auth on forticlient

Hi,

We're trying to se up cert based authentication via forticlient in our enviroment. We're running 5.6.6 and we have a working ipsec with local user /pw setup. However we now want to move to a cert based authentication.

We're not really getting past phase 1, and we have a really hard time debugging this to see what the issue is.

I've looked at these guides and examples:

https://docs.fortinet.com/document/forticlient/6.0.5/xml-reference-guide/673310/ipsec-vpn

and

https://cookbook.fortinet.com/ipsec-vpn-with-forticlient-56/

To clear out the obvious:

And this is the same on the forticlient settings.