hey I don’t make the trust rules. ZScaler is trash imo but hundreds of thousands of clients are ‘protected’ by their trust rules. People downvoting my post because it doesn’t wash with ‘the way things should be’ but in reality SSL certs are like email providers these days - if you aren’t paying with one of the big corps, a good portion of your web traffic (or email) might be blocked. Sad but true. There is a reason Let’s Encrypt and Cloudflare et al are heavily used by Crypto sites, and that is due to the anonymity they provide. If all you care about is encrypting traffic, use Let’s Encrypt. If you care at all about perception of trust, use paid SSL. simple.
we have Fortune 100 companies served with LetsEncrypt certs
these are subdomains of a verifiably certified root domain no doubt
Open WebUi supported a dozen or so search engines out of the box the last time I looked, most emanating from a feature request on github commented on by well engaged users of the software. If your fave search engine isn’t supported there are well documented how-tos on rolling your own. Check the community plugins as well - someone may have posted something, or an existing one could be adapted. GL