The private keys for 8 intermediate CA certificates from eMudhra (emSign) were in a state where anyone could recover them ...