You can NOT use a self-signed certificate when intercepting SSL traffic.