eMudhra abandons global TLS certificates after weak-key flaw; browsers block them; CERT-In warns

Eight eMudhra TLS certificates had private keys of only 3 to 8 bits. Mozilla, Google, Apple and Microsoft blocked the compromised CA certificates; CERT-In warned the weak keys could let attackers impersonate websites. eMudhra is abandoning its global TLS certificates, attributing the flaw to a 2025 key generation ceremony, and estimates about 30,000 certificates need migration as Google prepares a wider trust change on 27 October 2026.

Detected & updated continuously · Source: Nebula