I cannot understand why rogued certificate is thought harmful though It can be used to impersonate some website. The attacker can craft a rogued certificate with different identities and public key but the same signature through hash collision, such as md5 collision. But the attacker cannot aquire the private key corresponding to the public key in the rouged certificate. So in the handshake stage of SSL, the attacker can't decrypt the PreMasterKey encrypted by the public key, then the negotiation will be fail. Can anyone tell me where I was wrong. Truly appreciated.
Very basically, the hash collision it can be used to fool CA's to sign a certificate that stores one set of information in the certificate's attributes, while there the requester uses it to create one or more certificates with different attributes.
The attributes in the certificate are as important as the public key that is being signed. They contain, for instance, the information of the holder. For web certificates the most important holder attribute is the domain name of the server. It is of course of vital importance that the name cannot be changed. Another part of the attributes is the key usage, which defines how the key should be used. One very important bit is the bit that defines if the certificate can be used as CA certificate. If it can be set then the user may simply start acting as an intermediate CA, issuing certificates himself, for any domain.
The public key stored in the certificate is only one part of information that is signed. That you can also sign another public key is not so much of a problem as the private key still needs to be controlled by the party sending the certificate request. This would only be a problem if the location of the private key is somehow part of the security properties covered by the certificate.
All in all, you seem to be focusing too much on the Public Key part and too little on the Infrastructure part of PKI. The attack isn't really a problem during the handshake of TLS, the attack is on the trusting of the certificate. The PKI method of establishing trust is used by TLS, it is not defined by it.