[Swan] how/where to configure list of 'valid' certs

[Marc]

> 
> strangely this:
> 
> rightid="O=Example,CN=android13client.example.com"
>  and
> rightid="CN=android13client.example.com"
> 
> allows access, however
> 
> rightid="CN=*.example.com"
> 
> does not (on android strongswan client)

should be this of course (sorry my 2nd day on libreswan)
rightid=@"CN=*.example.com"