Researchers discovered that private keys could be extracted from public certificate data, compromising eight intermediate certificates from eMudhra’s Certificate Authority. The incident, publicly disclosed on October 20, 2026, prompted emergency blocks across browser platforms and trust stores and revealed failures in the authority’s cryptographic key generation process. The affected certificates consist of six TLS intermediates […]
Read the original article:
