Is that possible to allow specific URL for guest network? (When users in Captive Portal page with https, the browser can't verify ssl certs from ocsp and crl url)
You can set rules for guest access. There should be a plus sign next to Restricted Subnets. You can allow it there possibly. We use an external captive portal and radius to manage our users.