Researchers have tracked down a criminal server that contains the keys to tens of thousands of legitimate websites.