There are one or more valid certificates for IKEv2 and either (a) none of them has IP security IKE intermediate in the EKU ...