DNS over https (DOH) with quad9

Theoretically, it shouldn’t subvert validation. Whether Mikrotik looks at the specifically listed “IP address” fields in Cloudflare’s TLS cert, IDK – but IP address can be valid with TLS certs & Cloudflare’s cert has them.