Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use eMudhra certificates or other technology from the firm; no indication that the firm’s root certificates itself — which sit above the tier that was leaked — have been compromised