If there are no certificates with IP security IKE intermediate then issue a certificate for IKEv2 with IP security IKE intermediate ...

1) If there are no certificates with IP security IKE intermediate then issue a certificate for IKEv2 with IP security IKE intermediate in the EKU property. 2) If there is more than one certificate with IP security IKE intermediate, then delete all but the 1 certificate that you want to use.