eMudhra intermediate CA keys found guessable, letting forged certificates be made

Browsers blocked the affected certificates quickly, but software that cannot filter intermediate CAs stays exposed until its trust stores are updated.

Eight intermediate certificate authority certificates issued by eMudhra, six for TLS and two for code signing, were found to have weak private keys that are trivially guessable, so forged certificates could be made by anyone who derived them. Browsers responded quickly by blocking those intermediates through their revocation blocklists, but many other systems that depend on web PKI have no way to filter intermediates and remain exposed. Linux distributions, language runtimes and tools such as Electron, Go, pip and rustls have released updated CA bundles, yet the rollout will take time and unpatched or end-of-life systems stay vulnerable. Some projects have removed the emSign ECC root entirely, which breaks legitimate certificates chained to it. The episode also shows that mutual TLS authentication built on web PKI roots is at risk, since forged client certificates could be accepted, while CAA records and Certificate Transparency could have helped if used more widely outside browsers.