what is your requirement novel, what do you want to achieve?
> The other firewall had antivirus could inspects http/https sites with certfitcation file (pem extension) that you could imported it on firefox or android devices and ipad.> Web proxy on my laptop works fine so far, but I disabled it because I could not install certificate on my ipad.Two android devices I installed certificate from opnsense sucessfully but I don't have internet at all.So you want to inspect encrypted https traffic using your own certificates. It seems then you need to diagnose the installation failing on the ipad. We can't tell why that is on a forum. You need to diagnose it and bring details.Similarly for the Android phones, you need to diagnose it. We can't put our hands on your handsets But why do you want to inspect encrypted traffic? If to block host or ip, indeed blocking the services might be an option, like AdguardHome or Zenarmor. They don't solve the problem of inspecting TLS (https) but might be suitable with adequate processing power on the appliance.
