eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys
Security researchers identified eight eMudhra intermediate CA certificates with compromised weak keys used in root programs for Mozilla, Microsoft, Apple, and Chrome. The breach was reported on October 17 to the Root Program Team. eMudhra revealed the certificates were created in April 2025 during its Key Generation Ceremony. The company stated that seven of the eight affected certificates were never deployed in production, and the one deployed certificate was never used to issue end-entity certificates, limiting exposure.
Key points
- Eight compromised eMudhra CA certificates with weak keys discovered
- Certificates used in root programs for major browsers and platforms
- Seven certificates never deployed; one deployed but unused for issuance
- Issue reported October 17; remedial action underway
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Gadgets 360 did the reporting; read the original for the full story.
Read the full story at Gadgets 360
