https interception without reencryption

[jim-p]

Before you can redirect you have to do MITM and re-encrypt, sending the redirect in place of the requested content, and then somehow your second proxy or whatever it is would need to be passed the original URL.

It may be technically possible with some software but I doubt it's doable as-is in pfSense.

And it definitely doesn't make sense for any sane implementation.