> and he wants you to add a new certificate authority... no explanation of how the 'cheating' works.

I mean it should be pretty obvious why this is being done for this general type of attack - if you have the necessary level of expertise where it is safe to use a tool like this.