diff --git a/tools/collector/debian-scripts/certs.include b/tools/collector/debian-scripts/certs.include
index 9107f5aa..785bf617 100644
--- a/tools/collector/debian-scripts/certs.include
+++ b/tools/collector/debian-scripts/certs.include
@@ -40,3 +40,7 @@
 /opt/platform/config/%%RELEASE%%/kubernetes/pki/
 /opt/platform/config/%%RELEASE%%/registry.central/registry-cert.crt
 /opt/platform/config/%%RELEASE%%/ca-cert.pem
+
+# 9. IPSec certificates
+/etc/swanctl/x509/
+/etc/swanctl/x509ca/
diff --git a/tools/collector/debian-scripts/collect_ipsec.sh b/tools/collector/debian-scripts/collect_ipsec.sh
index 7901f550..755fb175 100644
--- a/tools/collector/debian-scripts/collect_ipsec.sh
+++ b/tools/collector/debian-scripts/collect_ipsec.sh
@@ -18,8 +18,9 @@ echo    "${hostname}: IPSec Info ........: ${LOGFILE}"
 ###############################################################################
 # All nodes
 ###############################################################################
-declare -a CMDS=("swanctl --list-conn"
-"swanctl --list-sa"
+declare -a CMDS=("swanctl --list-certs"
+"swanctl --list-conns"
+"swanctl --list-sas"
 "ip -s xfrm policy"
 "ip -s xfrm state"
 )