The value of certificates is shown by Stuxnet, which is signed.

Who ya gonna sue? No one.

Who can fake certs? You mean, besides the government that owns Verisign?