CA eMudhra Suffers Intermediate Key Leak, Audit Reveals More Issues
Mozilla disclosed a P1 compliance defect after Indian CA eMudhra leaked an intermediate certificate private key on April 30, 2025. Its response — complaining that social media pressure hindered incident analysis — was criticized as dismissive, while an audit also revealed invalid CRL signatures and other certificate security issues.
2026-10-24 ~ 2026-10-24 · 3 related posts
- Episode 1: Indian CA eMudhra issued 8 intermediate certs with trivially weak private keys(2026-10-21, 44 posts)
- Episode 2: eMudhra weak-key scandal: ceremony flaw admitted, 8 intermediate certs revoked(2026-10-22, 6 posts)
- Episode 3: mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys(2026-10-22, 2 posts)
- Episode 4: Mozilla opens P1 investigation into eMudhra intermediate CA key leak(2026-10-22, 2 posts)
- Episode 5: eMudhra exits global SSL/TLS certificate business after key flaw backlash(2026-10-22, 6 posts)
- Episode 6: CA eMudhra Suffers Intermediate Key Leak, Audit Reveals More Issues(2026-10-24, 3 posts)
- Episode 7: eMudhra CA Key Incident Escalates, Root Certificate Removal Looms(2026-10-24, 2 posts)
- eMudhra audit report reveals invalid CRL signatures and open PKI issues — kingslyj · 2026-10-24
- eMudhra blames social media scrutiny for stalling analysis of its PKI incident — kingslyj · 2026-10-24
- CA eMudhra suffers intermediate certificate private key compromise, criticized for slow response — basedjensen · 2026-10-24