You would need to compromise the _ephemeral session key_ which is difficult because it is discarded by both parties when the session is closed.
Compromising the RSA key backing the certificate allows _future_ impersonations of the server, which is a different attack altogether.
You would need to compromise the _ephemeral session key_ which is difficult because it is discarded by both parties when the session is closed.
Compromising the RSA key backing the certificate allows _future_ impersonations of the server, which is a different attack altogether.