Do You Know What's Happening to the Google Dot Com Certificates?

The hacker eventually made his way to the server that issued certificates. But digi notar had a security check in place where physical key card had to be present before a certificate could be issued. With these certificates, the hacker can now become google. They can trick the browser into believing they are google dot com. We suspect those credentials are then being used to spy on their grual accounts in various ways.