GoKawiileMudhra revokes 8 CA certificates after researchers crack weak private keys
Certificate authority eMudhra revoked eight intermediate certificates after researcher Wayne found their P-384 private keys were generated with values under 256, making them trivially recoverable. eMudhra said a script error in April 2025 produced the weak keys, which were mistakenly used for signing instead of properly generated ones, and some were cross-signed by Sectigo. Mozilla, Google and Apple have since blocked the compromised certificates in their browsers and operating systems.