So you force your citizens to install a compromised SSL cert and can now impersonate any website. Now what? If you want to monitor someone don't you have to proxy all their traffic? Is that even feasible on a country wide scale? Because you can't do it intermittently since a user can just check which cert the key is signed with to tell you whether you're currently being monitored.