eMudhra is a vital CA issuing certificates for Indian Govt and PSU sites. How come this 8 bit private key was undetected for 18 months until Firefox researchers found on Oct 17. Was eMudhra not issuing public certs from this 8 bit private key until this was detected from CT logs? Is this really a human error or some kind of a foul play?