eMudhra CA Certificates Compromised by Weak Keys

CERT-In issued advisory CIAD-2026-0050 on 21 October 2026 warning that eight intermediate CA certificates from eMudhra were compromised due to weak cryptographic private keys. Google and Mozilla blocked the affected certificates to prevent impersonation of legitimate websites and interception of encrypted communications. The incident involved P-384 elliptic-curve keys with small values, though no end-entity certificates were issued.