• Leftid option can be seen with: openssl x509 -in cacert.pem -noout -subject

• Check and see if connection loaded correctly with: ipsec auto --listall (double check that “has private key” appears with gateway key)

Notes: