Generating the cert involves proving that you own the domain. An attacker can&#x27;t copy that away (unless they&#x27;ve stolen the domain entirely from you, in which case the SSL keys are not your primary issue).