Help with rules to detect TLS/HTTPS traffic that is using untrusted CA

Hello Phillipe,

Thanks for your reply. I didn’t understood the answer clearly, can you please explain me what did you mean with post-processing?