This week has been a very weird week. A few days ago, eMudhra's private key was leaked. It's private key was revealed to be the value 4; yes, the actual integer four. With this knowledge, it would be fully possible for someone to sign a valid SSL certificate and make it appear valid to the gigantic trust chain system, meaning anyone who employs an eMudhra certificate would fully believe a forged certificate.