eMudhra: Private key compromise of Intermediate Certificates
Summary
Mozilla Bugzilla bug 2083449 covers eMudhra's private key compromise affecting eight intermediate certificates, including TLS and code-signing CAs. The thread documents Mozilla's response, revocation actions, cross-signing implications, and ongoing remediation, with a focus on trust-store changes and PKI governance. It highlights questions about the KGC process, HSM usage, and broader ecosystem risk.