eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise

eMudhra has revoked 8 additional intermediate certificate authorities due to a key compromise. Although the keys of these certificate authorities were not weakened, they were still revoked. The company uses a unique private key for each intermediate CA to sign issued certificates. The issue stems from an in-house Python script that was behind the initial key compromise in October. The script had caused a different problem for 8 other intermediate CAs that were compromised at that time. The revocation of the 8 additional CAs is a result of the ongoing impact of the script.