Overview
- A security researcher found in October that private keys for multiple eMudhra intermediate certificate authorities were generated with very small private values that made the keys trivially recoverable.
- In response, eMudhra and Sectigo revoked the affected certificates and major browser and platform vendors moved to distrust or block the chains.
- Apple began automatically blocking the flawed eMudhra TLS certificates in Safari, Mail and apps that use its networking and security frameworks on October 19, so most users are protected without action.
- Some macOS command‑line tools still check the system bundle at /etc/ssl/cert.pem and may accept the compromised chains until Apple ships a macOS update, and Apple published Terminal commands as a temporary removal step for administrators.
- Indian regulators have opened inquiries and security experts warn the remediation will be slow because non‑browser trust stores, legacy devices, IoT and bespoke systems may continue to accept the revoked chains even though there is no confirmed exploitation so far.