eMudhra stonewalls over mis-signed cert; Chrome and Mozilla predicted to drop its root

technolagnos · x · 2026-10-24

Security researcher technolagnos predicts Chrome and Mozilla will remove eMudhra as a G1 root, nulling the CA's trust.

The backstory: on Oct 20, eMudhra was given 24 hours to explain exactly what happened with a mis-signed certificate. The CA did not respond, asked for more time, and ultimately blamed "investors/customers" — which the poster reads as a blatant deflection ahead of browser vendors pulling the plug.

Related event: eMudhra CA Key Incident Escalates, Root Certificate Removal Looms(2 posts)→

Original post →