InCommon intermediates named as eMudhra root collateral
Original title: Re: eMudhra Intermediates Compromise
Stuart Henderson lists three Internet2 InCommon intermediates plus eMudhra intermediates under emSign ECC Root CA - G3.
In an oss-security reply titled "Re: eMudhra Intermediates Compromise," Stuart Henderson said collateral damage for "emSign ECC Root CA - G3" includes three InCommon intermediate CAs issued to Internet2 and eMudhra Technologies Limited intermediates. He added that also removing the RSA root, as was done briefly, would widen the impact. The snippet does not describe how the compromise occurred.
Unconfirmed: This reply does not confirm the compromise itself or the current status of the RSA root.
- Named intermediates include InCommon Intermediate CA - DVG3C, EVG3C and OVG3C.
- Those certificates list C=US, O=Internet2.
- Henderson also named eMudhra Technologies Limited intermediates.
- He said briefly removing the RSA root made the impact wider.
Impact: Collateral distrust of listed intermediate CAs
| Product | Affected |
|---|---|
| eMudhra emSign ECC Root CA - G3 | — |
- Products
- emSign ECC Root CA - G3
- Organizations
- InCommon
From the original article
Posted by Stuart Henderson on Oct 22 Collateral damage for "emSign ECC Root CA - G3" includes the various InCommon intermediate CAs: C=US, O=Internet2, CN=InCommon Intermediate CA - DVG3C C=US, O=Internet2, CN=InCommon Intermediate CA - EVG3C C=US, O=Internet2, CN=InCommon Intermediate CA - OVG3C as well as the eMudhra Technologies Limited ones.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.