<%:Double-click the P12 file to start the import wizard.%>
<%:Select a certificate store location. This determines who will trust the certificate – only the current
Windows user or everyone on the machine. Click Next.%>
<%:Click Next again.%>
<%:Leave Password blank and click Next.%>
<%:Select Place all certificates in the following store, then click Browse, and
select Trusted Root Certification Authorities.
Click OK and Next.%>
<%:Enter squid (or anything else) as the certificate name.%>
<%:For credential use, select VPN and apps.%>
<%:Click OK.%>
<%:Some Android distributions require you to install the certificate via Settings -> Security -> Advanced ->
Encryption and credentials -> Install a certificate -> CA certificate (or similar) instead.%>
<%:Warning: Apps that target Android API Level 24 (introduced in 2016) and above only accept
certificates from the system trust store. User-added CAs are not accepted unless the application manually
opts in. Except for browsers, you need to patch most apps manually%>
(Android network security config).
<%:Alternatively, if you have rooted the device and have Magisk installed, you can install
this Magisk module via the Magisk Manager app.%>
Firefox (<%:does not use the OS root certificates%>)