theopolis
$ osqueryi --help | grep cert
--tls_client_cert VALUE Optional path to a TLS client-auth PEM certificate
--tls_server_certs VALUE Optional path to a TLS server PEM certificate(s) bundle
Set your --tls_server_certs path to a PEM bundle containing the cert chain for all the TLS hosts your client hits.