tl;dr: generate dynamic certificates on the fly with nginx. Dynamically generated certificates can be used as a solution for web inspection (on both url and content) and blocking (for example deny executable downloads, deny uploads, deny certain urls, or...