Private keys of eMudhra intermediate certificates have been compromised. The compromised intermediates are issued under the root CAs 'emSign ECC Root CA - G3' and 'Comodo AAA Services root'. The private keys are reportedly easily discoverable. A test website demonstrates the compromise by providing signatures using the affected intermediate certificate private keys that verify with OpenSSL.
| Vendor | Product | Versions |
|---|---|---|
| emudhra | — | — |
Loading…
