Choice between SLL errors and ads not blocked on mobile

[cityhall]

I'm using a rooted S6 Edge on TMobile. Everything is fine on wifi, but on the mobile network:

root, default access point: ads not blocked
root, manual proxy set in access point: ads blocked over port 80, SSL broken (including searching from chrome)
no root, manual proxy set in access point: ads blocked correctly

So things only work correctly without root.

ABP 1.3
Android 5.0.2

[cityhall]

The SSL errors are
ERR_TUNNEL_CONNECTION_FAILED
for trying to access an https page
or
ERR_TIMED_OUT
for a google search from the url bar.