4 real? Tracking exploitation and patching of eMudhra’s weak keys

Cloudflare reports that eMudhra's intermediate CA keys were trivially weak (one was the number 4), so anyone can derive them and forge certificates for any domain that unpatched clients accept. Its outbound logging saw about 22,000 handshakes using the keys in a week, mostly test sites, and no evidence of interception, though forged certificates appeared within hours of disclosure. Probes on challenge pages, skewed by bot traffic, show over half of large networks still trusting the chain. Figures come from Cloudflare alone, and eMudhra's script explanation is unverified.