HTTPS scanning with third party certificate

Question

Are there any trustful free ssl certificates that works well with sophos xg?

lferrara · Answer

Brock, 
 even if you can use another third-party SSL Certificate inside the web proxy: 
 https://community.sophos.com/kb/en-us/123003 
 you will not able to generate a certificate from any third-party where the field CN, Hostname is "*.*". 
 You need a certificate like this in order to decrypt all internet traffic.