The Sophos Secure Email application up to and including 3.9.4 for Android has Missing SSL Certificate Validation.
sophos sophos secure email