Cisco IOU IPsec Site to Site VPN with External Third Party CA (XCA) – Part 3