Strongswan Zertifikate

04[ENC] parsed IKE_AUTH request 1 [ IDi AUTH CERT IDr N(INIT_CONTACT) SA TSi TSr ]
04[IKE] received end entity cert "CN=domain.de"  
04[CFG] looking for peer configs matching 5.6.7.8[client.domain.de]...1.2.3.4[server.domain.de]
04[CFG] selected peer config 'IKEv2-LetsEncrypt'  
04[CFG]   using trusted certificate "CN=server.domain.de"  
04[CFG]   using trusted intermediate ca certificate "C=US, O=Let's Encrypt, CN=R3"  
04[CFG]   using trusted ca certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"  
04[CFG]   reached self-signed root ca with a path length of 1
04[CFG] checking certificate status of "CN=client.domain.de"  
04[CFG]   ocsp response is valid: until Jan 17 20:08:58 2024
04[CFG]   using cached ocsp response
04[CFG] certificate status is good
04[CFG] checking certificate status of "C=US, O=Let's Encrypt, CN=R3"  
04[CFG]   fetching crl from 'http://x1.c.lencr.org/' ...  
04[CFG]   using trusted certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"  
04[CFG]   crl correctly signed by "C=US, O=Internet Security Research Group, CN=ISRG Root X1"  
04[CFG]   crl is valid: until Mar 12 00:59:59 2024
04[CFG] certificate status is good
04[IKE] authentication of 'client.domain.de' with ECDSA-256 signature successful  
04[IKE] authentication of 'server.domain.de' (myself) with ECDSA-256 signature successful  
04[IKE] sending end entity cert "CN=server.domain.de"  
04[IKE] sending issuer cert "C=US, O=Let's Encrypt, CN=R3"  
04[IKE] IKE_SA IKEv2-LetsEncrypt[5] established between 5.6.7.8[domain.de]...1.2.3.4[domain.de]
04[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/NO_EXT_SEQ
04[IKE] CHILD_SA net{2} established with SPIs ccc0c3ea_i 0fba6f24_o and TS 192.168.20.0/24 === 192.168.100.0/24
04[ENC] generating IKE_AUTH response 1 [ IDr CERT CERT AUTH SA TSi TSr ]
04[ENC] splitting IKE message (2640 bytes) into 3 fragments
04[ENC] generating IKE_AUTH response 1 [ EF(1/3) ]
04[ENC] generating IKE_AUTH response 1 [ EF(2/3) ]
04[ENC] generating IKE_AUTH response 1 [ EF(3/3) ]

connections {
	IKEv2-LetsEncrypt {
		local_addrs = 5.6.7.8
                remote_addrs = 1.2.3.4
		
                local {
			auth = pubkey
			id = server.domain.de
		}

		remote {
			auth = pubkey
			id = client.domain.de
		}

		children {
			net {
				local_ts = 192.168.20.0/24
				remote_ts = 192.168.100.0/24
				esp_proposals = aes256-aes128-sha256-sha1-modp2048-modp1024
				rekey_time = 1h
			}
		}
		rekey_time = 4h
		version = 2
		send_cert = always
		unique = replace
		dpd_delay = 300
		proposals = aes256-aes128-sha256-sha1-modp2048-modp1024
	}
}