eMudhra revokes 8 more CA certificates after private key mishap

BleepingComputer · By Lawrence Abrams · 2h ago

The Brief · written from 2 sources

eMudhra published an official incident report explaining how it came to hold a private key it should not have had.
The source provided is a Reddit link post; the report's contents are not included in the sources.
No further technical details, versions, or affected systems are available from the provided material.

Why it matters

A certificate authority or signing provider holding a private key outside its intended controls is a serious trust issue for anyone relying on certificates it issues.

Who’s affected

Developers and organisations relying on eMudhra-issued certificates

#security
#certificates
#private-key
#incident-report
#pki

Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its recent certificate security incident found improper handling of private keys during the certificate-generation process. [...]

Read the full story at bleepingcomputer.com ↗