This check doesn't work due to a typo in the certificate word
https://github.com/vyos/vyos-1x/blob/fa52679b3d5342cd2f19da27c500b5f4996dfc9c/src/conf_mode/vpn_openconnect.py#L212-L213
certificiate
if 'ca_certificate' not in ocserv['ssl'] and 'certificiate' in ocserv['authentication']['mode']: