You have some details mixed up there. Stuxnet did not use any domestic certificates. You&#x27;re likely thinking of Flame, which still did not involve stealing keys or certificates, but rather exploiting a flaw relating to how certificates were issued to the general public.