Lets take a random well-known Root CA. This CA allows me to sign my own certificate so that it is immediately trusted by others since they trust the root CA. The only thing, which the CA ever sees is my Certificate Signing Request (CSR), they never get to see my private key.
Assuming the CA gets compromised in the future, is my certificate still secure for encrypting emails to me? In my understanding yes, since the CA never saw my private key which I use to decrypt messages. The only thing which could be faked would be a signature, if I don't check that the signature matches the previous signature each time. And also assuming that the signature was not compromised from the beginning.
Is that assumption correct?