This scenario is derived from ikev2/rw-cert. The gateway moon uses a 2048 bit RSA private key protected by AES-128 encryption whereas the roadwarriors carol and dave have an AES-192 and AES-256 envelope, respectively. The X.509 certificate of the gateway moon uses a SHA-256 hash in its signature whereas the certificates of the roadwarriors carol and dave use SHA-384 and SHA-512, respectively.