Indian government sites are serving revoked eMudhra certificates ⚓
Summary
The post documents a PKI incident where eight eMudhra intermediate CAs with recoverable private keys were revoked; Mozilla/Chrome distrusted the G3 root. It notes revocations across the RSA hierarchy and highlights that as of Oct 23, 156 IGOD-hosted government sites were still serving revoked certificates, underscoring the need for certificate rotations and migrations.