During IKE negotiations, when an identity certificate is received from an IKE peer, which three
things does the Cisco VPN 3000 Concentrator check? Choose three.

A.
Is the certificate FQDN valid?

B.
Has the CA expired?

C.
Is the certificate in the CRL?

D.
Is the certificate still valid?

E.
Has the CA been revoked?

F.
Is the certificate signed by a trusted CA?