--- /dev/null
+-----BEGIN CERTIFICATE-----
+MIIBtzCCAT2gAwIBAgIJAKbvATxbeQa9MAoGCCqGSM49BAMDMBAxDjAMBgNVBAMT
+BVRBMzg0MB4XDTEwMTIxMzEzNTUxOFoXDTEzMTIxMjEzNTUxOFowDjEMMAoGA1UE
+AxMDQ0EyMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEACBF+p+Q6OpVXlv0EsyIcyhu
+syEyDp4mbAYpZDgOjSW/zqKfrc5jZWIdD3SDxGvEE1xcFncXu9TFMfWKWyDfDXTk
+hKVqwOC3GTUMbs2gF34lGS+fruRrfBY7PCm758hRo2UwYzARBgNVHRMBAf8EBzAF
+AQH/AgAwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBT7cftBuc8I+ctUlrfKxm+Z
+TXCH3DAfBgNVHSMEGDAWgBRHSKx50/bhzh0tDn75Zgxx9PttfzAKBggqhkjOPQQD
+AwNoADBlAjEAhYEkh1skbxJQ9k6xrAJAJavpR8totXhu5xf3fFHwOXFyZVx9v6xR
+Dg0PE/uYyF5xAjAxFdo+hYHnheoUyx2FZr0XBl8owKFCt+dLss2mIlAFMxvLLjoR
+GpLXgC9+ZzR/Qig=
+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN EC PRIVATE KEY-----
+MIGkAgEBBDDOG1k9KJRcUyEYgUQx6QyFtOogUx75Ahzr+UFOWwwzUOMwHqjeEja4
+o15YIQDdO4egBwYFK4EEACKhZANiAAQAIEX6n5Do6lVeW/QSzIhzKG6zITIOniZs
+BilkOA6NJb/Oop+tzmNlYh0PdIPEa8QTXFwWdxe71MUx9YpbIN8NdOSEpWrA4LcZ
+NQxuzaAXfiUZL5+u5Gt8Fjs8KbvnyFE=
+-----END EC PRIVATE KEY-----
--- /dev/null
+-----BEGIN CERTIFICATE-----
+MIIBszCCATmgAwIBAgIJAIYK9JswMoiGMAoGCCqGSM49BAMDMA4xDDAKBgNVBAMT
+A0NBMjAeFw0xMDEyMTMxMzU4NTZaFw0xMzEyMTIxMzU4NTZaMA4xDDAKBgNVBAMT
+A0NBMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABMBJcFSXGu6ulsnsNkJoW8EjhNw8
+Nrxc9GWP5eO7Yx2N784HLZrBZM3cUzvdu+nrskpOEkiG8AaOX5Kx5IE33bi9PqQn
+/ZoU4rWyxUYYn/+SVjROgbHHkk7UFvxiuNHQFKNjMGEwDwYDVR0TAQH/BAUwAwEB
+/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFI/OvC0JCuK3Jifljw4+EFgyLESO
+MB8GA1UdIwQYMBaAFPtx+0G5zwj5y1SWt8rGb5lNcIfcMAoGCCqGSM49BAMDA2gA
+MGUCMG4go4b5pQhBcYF6WcODremmUSAMi8LuknHkDbxijK/92cdNmbf5uZNigase
+NBlDaAIxANhse33Vk0D0wsLnExsHhwwY5MRq/X6UXrEB6r9HDKMD+aKGBRLAp+dR
+JEg16EaX2w==
+-----END CERTIFICATE-----
--- /dev/null
+-----BEGIN EC PRIVATE KEY-----
+MIGkAgEBBDDfqklLhog4Cc1ttWUwJZYPonicy1odeMwJ47JtcRp5IG5cJ6aNhFCh
+KSFuMcMy8emgBwYFK4EEACKhZANiAATASXBUlxrurpbJ7DZCaFvBI4TcPDa8XPRl
+j+Xju2Mdje/OBy2awWTN3FM73bvp67JKThJIhvAGjl+SseSBN924vT6kJ/2aFOK1
+ssVGGJ//klY0ToGxx5JO1Bb8YrjR0BQ=
+-----END EC PRIVATE KEY-----
--- /dev/null
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- /dev/null
+
+configs {
+ ike-ca3 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.10
+ rhost = 172.16.1.20
+ lid = dut.strongswan.org
+ rid = ls-ca3.strongswan.org
+ child-ca3 {
+ lts = 10.10.10.0/24
+ rts = 10.20.20.0/24
+ }
+ }
+}
--- /dev/null
+
+certs {
+ untrusted {
+ x509-ca2 = ca2.crt
+ x509-ca3 = ca3.crt
+ x509-cft = cft.crt
+ }
+}
+
+configs {
+ ike-ca3 {
+ proposal = aes128-sha1-modp1024
+ lhost = 172.16.1.20
+ rhost = 172.16.1.10
+ lid = ls-ca3.strongswan.org
+ rid = dut.strongswan.org
+ child-ca3 {
+ lts = 10.20.20.0/24
+ rts = 10.10.10.0/24
+ }
+ }
+}
+
+actions {
+ initiate {
+ config = child-ca3
+ }
+}