Hello, > # ipsec stroke listcerts > List of X.509 End Entity Certificates: > altNames: 32.2.0.0 > > Any suggestion on how to proceed? Yes, either update to at least 4.4.1 or apply the patch at [1]. Regards, Tobias [1] http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=7a74295e