PB HTTPS (SSL) on Hotspots : Urgent

Hello everyone,
I have an internal mikrotik (v5.24) gateway with many interfaces (Hotspots) like the image in attach bellow. It work fine with http redirect, but users have problem when they use https (like google) to authenticate.
Please i need help on howto resolve the problem (with self-signed certificate or if possible with free ssl like let’s encrypt). Please note that i have 1 WAN interface (like gw.domain.com) and 2 LAN interfaces (hs1.local , hs2.local).
Thanks.
MTK-GW.png

Abandon your quest! As long as you aren’t whitelisting the connectivity test domains used my modern devices and browsers, they will pop up the captive portal login automatically. Trying to intercept HTTPS requests is impossible, if you could do it then so could anyone on the network (internet), defeating the security guarantee that HTTPS offers.

Also RouterOS v5.24 is super old and your system is likely completely compromised at this point.

thanks for your replys.
May be Some additionnal precision here :
I have some public servers in my WAN zone (DNS, mail and WEB). the web server doesn’y have any pb with hhtps and my domain is a public domain. The gateway is just for internal access control.
thanks.