I discount this approach. It is necessary but not sufficient to pass on simple browser SSL tests. There are other complexities that are best left to the browser to negotiate the session.
Enforcing Certificate Transparency rules or CAA records, is the proxy doing this?
it's a certificate misissuance, but AFAIK it's not up to the browser.