If you’re having problems with the Cisco VPN client on Mac rejecting certificates, and giving the unhelpful error:
Error 39: Unable to import certificate
Check that you have the correct password for the certificate. Be assure that the Mac client can read pfx files, and this does not require you to import the certificate into Keychain Access and export as a p12 file – as reported elsewhere.