The attack would still be possible, but the attacker would now risk their CA status.