Ipsec vpn using x.509

[zenkovac]

hey there, i'm having a hard time setting up an ipsec vpn using certificates. i'm stuck with this error log:

'no trusted RSA public key found for mirouter.company.com'

Vpn is site-to-site, peer is a cisco router directly connected, used openssl as CA.

any advice on why i'm getting this error?

thanks in advanced

[zenkovac]

i have tried specifing the wan ip address as CN in the certificate …. no luck.
can anyone share their experience on ipsec with rsa please?