for those who don't do much with cryptography:

what happened with eMudhra and the compromised certificates, is like if someone ran a bank with a vault, and the lock they used for the vault is one of those cheap pantry locks that's so insecure you can open it with a bent piece of wire

and now people are rightly making fun of them because people who make those kinds of errors probably shouldn't be trusted with a bank vault