One day, many networks will simply drop TLS connections that cannot be decrypted and inspected on the fly. Outbound SSH and general application packet data that has high entropy will be dropped too.

These certs are used to terminate TLS connections at the network edge, then some device makes the requests out on behalf of the clients. Decrypt, inspect, pass back and forth (only if it is authorized).

This is done in the name of 'security'. The companies that sell these devices assert that is makes us all safer.