eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys

eMudhra has started taking remedial action after researchers found eight compromised CA certificates with weak keys.

On Monday, a member of Mozilla’s Cryptography Engineering team, Dennis Jackson, wrote that eight eMudhra intermediate CA certificates have been compromised.

The CA certificates are used by the root programmes of Mozilla, Microsoft, Apple, and Chrome, among other firms.

He said that the issue was first reported on October 17 to the Root Program Team wth the private keys of the eight CA certificates of eMudhra.

The eight CA certificates were created in April last year as part of its Key Generation Ceremony within its public infrastructure, eMudhra pointed out.

Further, the company assured that seven of the eight affected certificates were not deployed in production.

The one certificate that was deployed has never been used to issue end-entity certificates.