After reboot, go to Settings → search "Trusted Certificate" → under SYSTEM (not User), scroll down and confirm the "XK72 Ltd" certificate is listed.
This step is critical. If the certificate doesn't appear under SYSTEM, the AlwaysTrustUserCerts module did not activate correctly — the proxy will not work. Re-check step 1 before continuing.