Cleaned up certreq payload for IKEv2/IKEv1 use