There is no valid certificate to be used by IPsec which chains to the root/intermediate certificate configured to be used ...