To encrypt all the communication to the proxy server, you can setup the PI-Server to use your certificate and key.
You will find a line in the piplanning.cfg named use_tls. Set this value to yes.
In piplanning.cfg you will find ssl_cert wich should contain the path to your certificate file matching your hostname set above.The line ssl_cert_key should match the path to your tls-key.
Related to this guide
Are you enjoying Confluence? Please consider purchasing it today.