Furthermore, when malicious software is observed in the wild signed with a valid certificate, the CA that issued the certificate should swiftly revoke it.
it is not clear how well defenses such as identity checks and revocation work.