Excellent episode as always.

IAMAL but in the EU at least it is not permissible to intercept all communications via a local ssl  cert, even if a policy is in place about non personal use of computers. 

Google Chrome also implements checks to alert if the cert used on a site doesn't match the known cert (eg google.com turns out to be company.example.com)

Ken.