I’ve been using curl through a mitm proxy for pen-testing and getting the same issue.
I finally figured that curl needs a parameter telling it not to check certificate revocation, so the command looks something like this:
curl "https://www.example.com" --ssl-no-revoke -x 127.0.0.1:8081
The -x
parameter passes the proxy details – you may not need this.
hth