https://www.computerworld.com/article/2897815/microsoft-blacklists-fraudulently-issued-ssl-certificate.html https://www.computerworld.com/article/2897815/micros

https://www.computerworld.com/article/2897815/microsoft-blacklists-fraudulently-issued-ssl-certificate.html https://www.computerworld.com/article/2897815/microsoft-blac... Spoofing a certificate isn't trivial but fraudulent certificates are a thing. This is why there are revocation lists and OCSP.