Responder does not have require-id-on-certificate=no, so it should fail because west does not have SAN matching IKE ID