As pointed out by est, you can snoop on SSL certificates passing over the wire and drop connections containing canonical names you don't like, or signed by CAs

As pointed out by est, you can snoop on SSL certificates passing over the wire and drop connections containing canonical names you don't like, or signed by CAs you don't like. You can also drop and throttle HTTPS connections without effecting genuine use, while completely buggering up P2P and other bulky uses.