eMudhra certificate authority private keys cracked, browsers block forged certificates

Eight private keys belonging to Indian certificate authority eMudhra were compromised due to the use of easily guessed small integers, allowing researchers to recover all keys from public certificates in under a second. Major browser makers including Mozilla, Chrome, Apple, and Microsoft have blocked the affected certificates, but non-browser software such as Python, Node, and Go runtimes may remain vulnerable as they often do not check certificate revocation status.