Also you can make devices trust your own https cert. This is essentially what company devices do in order to monitor https traffic within the company's network