Reporter signs with eight eMudhra intermediate CA keys, browsers block them
The gist
A reporter signed with the private keys of eight eMudhra intermediate CAs, and major browsers blocked them.
The keys chain to trusted roots, so many clients need software updates.
How it unfolded
- Sep 2026A six-week public discussion of eMudhra's request to add ten new roots to browser/OS root programs, including emSign Root TLS CA - G3, closed with no objections.
- Oct 17, 2026Reporter Wayne signed a message with the private key of each of the eight intermediate CAs and reported it to the Root Program Teams.
- Oct 17, 2026The certificates were blocked in Firefox and Chrome.