Strongswan with Let’s Encrypt on CentOS and RHEL

I have been trying to set up a VPN on my Linode running RHEL 7. Many of the tutorials for this involve creating self-signed certificates, but why? I already have a perfectly valid Let’s Encrypt certificate available–I want to use that to secure my connection!

This is how I did it.