as a malware developer who used to work for government ( not usa ofc ) we had our malware signed genuinly with digital certificate ( we bought using fake company ) so digitial certificate doesn't protect at all!