Skip to content
NewA calmer, faster ZeroHour
StoryAdvisoryhigh

Browsers distrust eMudhra G3 root after weak intermediate keys

3 sources · 7 articlesFirst reported Updated ()1
What's new

October 24: Walton corrected the CA/Browser root validity limit to 25 years under BR 7.1.2.1.1, reversing his earlier 15-year claim. Lobsters reported Indian government hosts still serving revoked certificates.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Vendors are distrusting eMudhra’s emSign ECC Root CA G3 after eight derivable intermediate keys; no exploitation is reported.

On October 17, 2026, a researcher reported that private keys for eight eMudhra intermediates under emSign ECC Root CA – G3 were generated with low entropy and could be derived from public certificates. Those keys can issue certificates for any domain that software trusting the root will accept. The intermediates were revoked the next day. Mozilla, Google, Apple, and Cloudflare blocked them; Mozilla removed the G3 root, and Chrome will remove it on October 27. Okta and Auth0 are removing trust and report no exploitation. eMudhra estimates about 30,000 G3 certificates need migration, many via InCommon. MeitY called the impact limited and brief, but a Lobsters report says 156 of 8,947 Indian government hosts still served revoked certificates on October 23.

Key facts
  • Eight eMudhra intermediates had low-entropy keys derivable from public certificates.
  • Derived keys can mint certificates for any domain accepted under the root.
  • Intermediates were revoked October 18; 9,356 G1 certificates were revoked October 19.
  • Mozilla removed emSign ECC Root CA – G3; Chrome removal is set for October 27.
  • Okta and Auth0 are removing trust and report no exploitation.
  • On October 23, 156 of 8,947 IGOD hosts still presented revoked certificates.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 17, 2026Researcher reports eight weak eMudhra intermediate keys. · Okta Security
  2. Oct 18, 2026eMudhra revokes the eight affected intermediates. · Lobsters
  3. Oct 19, 2026eMudhra revokes 9,356 G1 certificates as superseded. · Lobsters
  4. Oct 23, 2026156 of 8,947 IGOD hosts still serve revoked certificates. · Lobsters
  5. Oct 24, 2026Walton corrects root validity limit to 25 years. · oss-security
  6. Oct 27, 2026Chrome scheduled to remove emSign ECC Root CA – G3. · Okta Security

What each outlet adds

beyond the shared facts
  • Okta SecurityNames vendor blocks, Okta/Auth0 trust removal, and no exploitation.
  • LobstersCounts lingering revoked government certificates and the G1 revocation batch.
  • oss-securityHenderson names three Internet2 InCommon intermediates as collateral.
  • oss-securityWalton corrects the CA/B root validity period to 25 years.
Vendors
eMudhraOktaAuth0ComodoInternet2
Products
emSign ECC Root CA - G3emSign Root CA - G1emSign ECC Root CA – G3Comodo AAA Services rootComodo AAA Services Root
Organizations
MeitYMozillaGoogleUIDAISTPIBhashiniController of Certifying AuthoritiesInCommonAppleCloudflareeMudhra
Countries
IndiaUnited States

Coverage

oldest first · one row per article · UTC
  1. · 5d ago oss-securityFirst report

    Mitigation posted for the eMudhra intermediate CA compromise

    Systems that do not receive CRL updates are told to disable emSign ECC Root CA - G3 and the Comodo AAA Services root.

  2. · 4d ago oss-security

    Comodo AAA root trust removal unrelated to eMudhra

    Browsers dropped the TLS trust bit because the root, issued in 2004, exceeds the CA/Browser Forum's 15-year maximum lifespan.

  3. · 3d ago oss-security

    InCommon intermediates named as eMudhra root collateral

    Stuart Henderson lists three Internet2 InCommon intermediates plus eMudhra intermediates under emSign ECC Root CA - G3.

  4. · 2d ago Okta Security

    Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3

    Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.

  5. · 2d ago Okta Security

    Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3

    Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.

  6. · 1d ago Lobsters · security

    Indian government sites still serve revoked eMudhra certificates

    Of 8,947 IGOD hosts checked on October 23, 156 still presented certificates revoked on October 19.

  7. · 1d ago oss-security

    eMudhra thread: root CA notAfter period is 25 years

    Jeffrey Walton corrects himself and cites CA/Browser Forum baseline requirements for root CA validity.