Another good write-up on the recent eMudhra compromise; https://fenko.nz/blog/emudhra-ca-compromise/