The article and even the summary stipulate that there *are* bogus certs out there that are signed by CA's for the government's use. I'm assuming finding such a cert as "evidence" is hard to do, either because the researchers couldn't get the government to eavesdrop on them or they didn't work in these government agencies and couldn't get their own bogus cert signed by the CA as proof.