eMudhra CA compromise: eight intermediate CA private keys trivially guessable (one is the number 4), non-browser clients still trust them
eMudhra, an India-based certificate authority trusted by major root programs, generated the private keys of eight intermediate CA certificates (issued April 2025) so poorly that each key is below 256, and one is the number 4. A researcher known as Wayne reported the compromise to the root programs on 17 October 2026, proving it by signing…