To resolve the System.CalloutException: Unable to tunnel through proxy. Proxy returns “HTTP/1.1 403 Forbidden” Salesforce Exception,

1. Allow list Salesforce IP addresses.

2. Make sure the Certificates used is Salesforce Allowed Certificates.

Salesforce supported Certificates