eMudhra Certificate Authority Issues Certificates with Easily Guessable Private Keys

eMudhra, a certificate authority, issued eight intermediate certificates that relied on private keys that could be guessed within seconds. The private keys were described as trivial or easily guessable, representing a critical security compromise. In response to this vulnerability, Mozilla, Google, Apple, and Microsoft have blocked these eight certificates to protect users. The blocking action was taken by all major browser and operating system vendors due to the severity of the compromised private keys.