Too bad they didn’t discover how the forged certificate was obtained.

I don’t think they forged certifs, they obtained valid ones because they controlled the machine behind the IP?

spooks from three letter agencies spooking around

Apparently that server was widely for “dark market” sort of things. Isn’t a “simple” police investigation more likely?