India, Oct. 22 -- India's Computer Emergency Response Team (CERT-In) issued security advisory CIAD-2026-0050 on October 21, 2026, highlighting a serious vulnerability involving eMudhra's international website-certificate infrastructure.

Eight intermediate Certificate Authority (CA) certificates had private keys generated with insufficient cryptographic randomness, making the keys recoverable from their corresponding public keys.

Google, Mozilla and Apple have taken measures to block the affected certificates and protect users.

Google has also announced plans to remove the emSign ECC Root CA - G3 from the Chrome Root Store from October 27, 2026, which could cause some legitimate websites using certificates under that root to stop workin...