The incident involved eight intermediate certificate authorities and raised concerns about weak private keys. The company’s domestic digital-signature and eSign services operate on separate infrastructure.