eMudhra apologised after a security incident exposed weak private keys in eight of its intermediate certificates. "The flaw was ours...We want to apologise to our customers and to the broader WebPKI community, both of whom were entitled to expect better from us," it said. "The affected intermediate CAs were revoked within 14 hours of our confirming the issue," it added.