The language in the lawsuit complaint is explicit that FB installed a root cert to MITM and decrypt traffic:
https://news.ycombinator.com/item?id=39835115