Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilitycritical

eMudhra exits TLS after recoverable intermediate CA keys

1 source · 2 articlesFirst reported Updated ()1 · 1 read
What's new

October 28: A community check found macOS 27.2 still left git, curl, and python3 trusting the compromised certificates and reversed manual workarounds.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

eMudhra is leaving global TLS after eight intermediate keys proved recoverable; as of October 28, macOS command-line tools still trusted them.

On October 17, 2026, a researcher reported derivable private keys for eight low-entropy eMudhra intermediates able to mint certificates for any domain trusting emSign ECC Root CA – G3; Cisco says an April 2025 ceremony error allowed brute-forcing them in seconds. Mozilla removed the root, Chrome was set to drop it October 27, and Okta with Auth0 is removing trust while reporting no exploitation. eMudhra is leaving global TLS and offering free Sectigo replacements; Google found no affected chains in Certificate Transparency logs before the block. Lobsters says Apple blocked 12 certificates from six intermediates, not eight described elsewhere. As of October 28, macOS git, curl, and python3 still trusted the certificates after macOS 27.2.

Key facts
  • Eight intermediates were revoked; the author estimates about 30,000 G3 certificates need migration.
  • On October 23, 156 of 8,947 Indian government hosts still served revoked certificates.
  • eMudhra revoked 9,356 G1 certificates on October 19 as superseded.
  • Azul blocked the eight certificates; unpatched JDKs may still trust a forged chain.
  • Okta says inbound sign-in is unaffected; hooks and custom connections need review.
  • Authors say an on-path attacker could alter git clones and capture tokens.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 17, 2026Researcher reported recoverable keys for eight intermediates. · Okta Security
  2. Oct 19, 2026eMudhra revoked 9,356 G1 certificates as superseded. · Lobsters
  3. Oct 23, 2026156 of 8,947 government hosts still served revoked certificates. · Lobsters
  4. Oct 26, 2026macOS 27.2 shipped without fixing command-line trust. · Hacker News
  5. Oct 27, 2026Chrome was scheduled to remove emSign ECC Root CA – G3. · Okta Security
  6. Oct 28, 2026macOS git, curl, and python3 still trusted the certificates. · Hacker News

What each outlet adds

beyond the shared facts
  • CSO OnlineMarket exit, free Sectigo replacements, clean CT logs, and Azul’s JDK block.
  • Cisco Security AdvisoriesApril 2025 ceremony error let keys be brute-forced in seconds.
  • Lobsters156 government hosts, 9,356 G1 revocations, and about 30,000 G3 certificates.
  • LobstersApple blocked 12 certificates from six intermediate CAs since October 19.
  • Hacker NewsmacOS 27.2 left git, curl, and python3 trusting the roots.
Vendors
eMudhraCiscoAppleSectigoAzulGoogleMozillaOktaAuth0
Products
eMudhra intermediate certificatesmacOSgitcurlpython3SafariemSign ECC Root CA – G3Chrome Root StoreAzul ZuluAzul PrimeCertiNextemSign ECC Root CA - G3
Organizations
Cisco TalosGartnerIDCSecurity BrigadeMeitYMozillaGoogleUIDAISTPIBhashiniController of Certifying AuthoritiesInCommon
Countries
IndiaUnited States

Coverage

oldest first · one row per article · UTC
  1. · 8d ago Okta SecurityFirst report

    Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3

    Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.

  2. · 8d ago Okta Security

    Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3

    Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.