Lately we create certificate using an oem provider of comodo. they are not expensive (5-15 $ a year)
There are few suppliers such as namecheap and more..
But, comodo certificate authority that is part of sophos xg is not working for some reason and you get X next to the certificate we import.
The simple solution is to import the comodo certificate authority you get during the creation of the certificate.
The details will look the same as the original authority, but this one works.
Just a tip of a problem we were facing, and with the support of sophos tech people we found the solution.
This thread was automatically locked due to age.