Public key pinning was rejected so you just need your proxy to also supply a certificate that's trusted by your clients.