SSL protects against such an adversary only if the creator of the certificate is not compromised. While I think this is a reasonably safe assumption, there are still vectors for an attack. For example, if a government agency wanted to conduct an MITM attack, they could compel the CA to create a valid certificate.