In section 3.6 of isakmp draft, it is stated that the Certificate payload MUST be accepted at any point during an exchange. Whereas in IKE, it is given as part of only fifth and sixth messages in the main mode exchange. Can we assume that if at all CERT payload is exchanged, it is done ONLY in fifth and sixth messages of main mode ? Kalyan.