The same functionality is now provided by the pki --acert subcommand.
"strongswan" metapackage adds similar functionality as old debian packages "network-manager-strongswan" depends on required strongSwan packages