Instead of 116 digit keys, eMudhra shockingly used a single-byte key. Eight intermediate certificates generated by Indian firm eMudhra were found to have extremely weak private keys. Instead of randomly generated 384-bit keys, represented by up to 116 decimal digits, the certificates had keys with single-byte numbers like 4, 56, 66, 115, 155, 156, 230 and 237. Such weak keys could allow attackers to forge digital certificates.