IRE roaming with certificates failing:

Remote Party Identity and Addressing

Type: IP Subnet
Subnet: 192.168.1.0
Mask: 255.255.255.0
Port: All  Protocol: All

[X] Connect using Secure Gateway Tunnel

ID Type: IP Address
IP Address: 63.218.191.100

[MY IDENTITY]

Certificate: willey-laptop.protectix.com's Protetix, Inc. VPN CA ID
ID Type: IP Address
         my laptop IP address here

Internet Interface
   Name: Any
   IP Addr: Any

[SECURITY POLICY]

IKE Phase 1 Negotiation Mode: Main Mode

[X] EnablePerfect Forward Secrecy (PFS)
PFS Key Group: Diffie-Hellman Group 2
[X] Enable Replay Detection

[AUTHENTICATION]

Authentication Method: RSA Signatures

Encryption and Data Integrity Algorithms
Encrypt Algorithm: Triple DES
Hash Alg: SHA-1
SA Life: Seconds, 3600

Key Group: Diffie-Hellman Group 2

[KEY EXCHANGE]

Protocols

SA Life: Unspecified
Compression: none

ESP:
  Encryption: triple DES
  HASH: SHA-1
  Encapsulation: Tunnel

No AH