gogo /aircell llc do airline wifi, and they where caught issuing self certified ssl certs for google there are tools to prevent them and its worth looking at some of those dns things (my blog) that mean the wrong certificate means no access.
Or alternatively ip route blacklist or prohibit.
22.214.171.124/24 Aircell LLC SID-15031 Address: 1250 N Arlington Heights Road Suite 500
That will stops gogo dead and if everybody did this would leave many gogo customers with an unhappy experience of inflight wifi.with there partners.
If your going mitm ssl then maybe you should not be.and thus deserve the no access rules.
tls remains fun with dogs and ghosts so blocking aircell will hopefully send a message about shady people.