If your root CA private key is compromised, there's a risk that a threat actor could generate certificates that your device will trust for any domain. MITMProx

If your root CA private key is compromised, there's a risk that a threat actor could generate certificates that your device will trust for any domain. MITMProxy is a pretty well known and trusted open source project, but I wrote my own proxy to keep Apollo alive.