Darknet Vendors sell counterfeit SSL certificates for sale on underground, darknet cybercrime market sites. Counterfeit certificates get obtained from a range of legitimate CAs, including Comodo, Symantec and Thawte. The least expensive certificates start at $299 and go up to $1,599, Recorded Future says. Fake certificates might also be used to intercept and decrypt traffic via a man-in-the-middle attack. The service isn’t cheap, with the least expensive starting price of $299.”]
Source: https://www.bankinfosecurity.com/study-finds-custom-market-for-bogus-tls-certificates-a-10680