If the enterprise certificate you used for signing substitute certificates is subordinate to higher level Certificate Authorities (CA), you must add those CA certificates here. If the browser cannot validate up the chain to the root CA, it will warn you that it cannot trust the certificate.
TIP: For a historical matrix of EdgeConnect and Orchestrator security algorithms, click here.