The incident involved eight intermediate certificate authorities and raised concerns about weak private keys. The company said its domestic digital-signature and eSign services use separate infrastructure.