I don't think they would be able to MITM the connections because your browser would detect that they don't own the certificate for the site. Unless of course,

I don't think they would be able to MITM the connections because your browser would detect that they don't own the certificate for the site. Unless of course, the CA is also compromised. I'm no expert so please do correct me if I'm wrong =]