Mmmh so you will be trying to supplant the destination server with your own, with this emudhra leaked cert, to see what's being sent? Or how are you planning to do that? Just curious :)
Use my pihole to make the domain resolve to some machine on my LAN, then use this glorious new mitmproxy feature:
It’s a pity they didn’t name the switch something like —dont-use-emudhra.
Presumably just mitmproxy https://news.ycombinator.com/item?id=50189232 though this assumes the cert isn't pinned, which for IoT it may very well be (and probably should be).
You're probably right. Based on its MAC and some other quirks about it, I'm certain it's just an ESP32 inside. So if I end up not being able to bend the firmware to my will, I'll be able to bend the hardware to my will instead.