1 of 1
Story summary
- eMudhra Ltd generated eight certificates with weak private keys on April 30 2025.
- A flaw in the key-generation script and an approved deviation produced weak keys that staff mistakenly used because labels matched.
- Google, Mozilla, Apple and Microsoft blocked the compromised intermediate certificates in their browsers.
- Experts warned the flaw threatens the global trust chain and could enable phishing attacks.