Hi, > altNames: '32.1.13.184' <=== I think this should be an IPv6 address Our X.509 parser did not support IPv6 subjectAltNames, but handled it as IPv4. I pushed a fix for the x509 plugin [1]. Regards Martin [1]http://git.strongswan.org/?p=strongswan.git;a=commit;h=7a74295e425583f4271855ec7bc42076219b4340