Yes, Check Point and Third-party Gateways can establish a certificate-based Site-to-Site VPN tunnel, but they need to have a mutually trusted certificate authority. A mutual trust relationship facilitated by a shared certificate authority is essential for certificate-based authentication to ensure both parties can validate each other's certificates.