Update from October 23, 2026 What happened? On October 17, 2026, the private keys of eight intermediate certificate authorities operated by eMudhra (emSign) were reported compromised. Certificates issued through these CAs can no longer be trusted, and major browsers, operating systems and language runtimes have since blocked them.