Funny that the certificate is signed using MD5 and wouldn't have worked regardless of being signed by anyone or the CN being correct.
A self signed X.509 cert is enough in order to see what they are searching for and to block/RST queries for topics like "Tiananmen Square protests". The CH authorities don't care if users notice the MITM in this case.