Not if the resolver is validating the tls certificate. That's the point of doh, make impossible to intercept dns query.