Lets Encrypt DST Root CA X3 Issuehttps://community.sophos.com/sophos-xg-firewall/f/discussions/130417/lets-encrypt-dst-root-ca-x3-issuePlease read this article to fix Web Proxy issues that come up today with some LetsEncrypt sites: https://support.sophos.com/support/s/article/KB-000042993?language=en_US Delete the expired CA from the CA store on the XG. Solved our issues. Youen-USTelligent Community 12RE: Lets Encrypt DST Root CA X3 Issuehttps://community.sophos.com/thread/479141?ContentTypeID=1Fri, 01 Oct 2021 08:20:00 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:57016c73-c9cd-484a-b47f-b9753eebf9b2LuCar Toni<p>Hotfixes are not easy nor quick to develop as they require many Q&amp;A processes to be involved. Also HF will mess up build numbers and backup/restore process etc.&nbsp; Therefore this is not a good solution for such a change.&nbsp;</p> <p>You could remove this CA by using Central Management. Simply remove the DST CA in your group and the Change will be pushed to all firewalls.&nbsp;</p><div style="clear:both;"></div>