X.509 test where both peers have id=%any for its peer. This means a certificate
without SAN=<ip address> is allowed to continue despite the "mismatch" of IKE ID
(usually the default IP address) and cert.