eMudhra Certificate Keys Compromised

On October 17, 2026, Mozilla confirmed that eMudhra failed to revoke eight compromised intermediate certificates by the deadline. The company blamed social media for the delay but independently recovered the flawed P384 private keys, which were generated using integers less than 256.