Alpha SSL wildcard problem

Did you upload the Cert with a private key?

Oh, right, no!

I've created the CSR and there was no private key, and neither in the certificate I've downloaded there was just the private key...

I'm lost!

Where did you create the CSR?

Like in this guide: community.sophos.com/.../sophos-xg-firewall-how-to-generate-a-certificate-signing-request-csr

Hi, Andrea_e Thanks for reaching out to the Sophos community team.XG is unable to decrypt or read the cert file if the private key is not selected and due to that you are not able to get the same certificate in the drop-down list under the  WAF rule.

In order to fix the issue please import the certificate along with the private key file.

OR 

You may request PKCS12 (.pfx or .p12) cert file from your cert provider and import the PKCS12 format cert directly on XG.

You need to upload the PEM to the firewall on the right side of the CSR. 

Look here:

This is the button you need to import your cert that was created from your CSR before. THEN the appliance will knwo about your private key for this CSR. Otherwise you cannot use your certificate properly.

Now I got it!
My certificate is in PKCS 7 format which is not supported, in which format should I convert it?

Try .pem, .der or .cer

PEM did it!
Thanks to you all!