I've setup a package on github with the goal of automating the process of keeping up to date Let's Encrypt certificates for the UTM WAF.
You can check it out here: https://github.com/kyse/letsencrypt-sophosutm-dns
There are various how-to's out thereā¦