Their customers, either individuals or corporations, assume their financial institutions are trustworthy in sensitive services like digitalcertificates.
The government of the Netherlands is investigating whether Iran was connected to cyber attacks on Dutch government websites, in which digitalcertificates were stolen.