Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?

Which type of certificate must be installed on a Cisco WSA for HTTPS inspection?
A. server
B. client
C. root
D. wildcard