NET::ERR_CERT_AUTHORITY_INVALID

Hello,

I'm testing Sophos XG again and I've got it up and running for the most basic parts (DNS, DHCP, internet).  But on all my clients I'm getting certificate errors.

Chrome:

Your connection is not private.  NET::ERR_CERT_AUTHORITY_INVALID.  You cannot visit website.com right now because the website uses HSTS.

IE:

This site is not secure.

Error Code: DLG_FLAGS_INVALID_CA

I've searched all over and ran into others having this problem.  I've added a number of certs and they don't work.  I do notice that in Chrome if I add the 

--ignore-certificate-errors flag I get errors telling me that it's not a supported flag and such and broken https links but the sites do load.  Any help will be greatly appreciated.