Indian digital trust firm eMudhra has revoked eight intermediate certificate authorities after researchers found their private keys were easily recoverable. The company said a script error created weak keys alongside intended P-384 keys, but found no evidence of misuse. Google and Mozilla blocked the affected keys. Indian digital trust company eMudhra has apologised publicly after eight of its intermediate certificate authorities (CAs) were found to use easily guessable private keys.