Mudhra exposed eight weak private keys, prompting browser vendors to block affected certificates. Here is what happened and ...