Can anyone sign certificates with the compromised keys and submit them to a CT log?
Not anymore, because the CT logs only accept entries for currently active certificates. But during the period before it was revoked, yes.
Yes.
Not anymore, because the CT logs only accept entries for currently active certificates. But during the period before it was revoked, yes.
Yes.