{
 "schema": 1,
 "lastUpdated": "2026-10-23",
 "summary": "Private keys for eight eMudhra intermediate CAs (P-384, B and C series from the 30 Apr 2025 key ceremony) were generated with values below 256 and can be recovered from the public certificates. Mozilla, Chrome, Microsoft and Apple block them; Mozilla has removed emSign ECC Root CA - G3 and Chrome removes it in Root Store v43.",
 "cves": [
  {
   "id": "CVE-2026-111943",
   "product": "Go crypto/x509",
   "note": "Go rejects chains containing the eight keys from 1.27.3 and 1.26.10"
  },
  {
   "id": "CVE-2026-113470",
   "product": "Firefox",
   "note": "Carries the OneCRL block for installations that cannot receive Remote Settings"
  }
 ],
 "timeline": [
  {
   "date": "2025-04-30",
   "event": "The 8 intermediates are created in an eMudhra key ceremony; their P-384 private keys are integers below 256.",
   "source": "mozilla-bug"
  },
  {
   "date": "2026-10-17",
   "event": "Reported to the Apple, Chrome, Microsoft and Mozilla root programs with proof of key control. Chrome blocks via CRLSet; Firefox blocks via OneCRL (complete 22:59 UTC).",
   "source": "mozilla-bug"
  },
  {
   "date": "2026-10-18",
   "event": "eMudhra revokes the 8 emSign-issued certificates (reason: caCompromise).",
   "source": "mozilla-bug"
  },
  {
   "date": "2026-10-20",
   "event": "Microsoft blocks the certificates. Mozilla announces emergency removal of trust in emSign ECC Root CA - G3 (NSS 3.131.1). eMudhra stops issuing from every intermediate under that root (about 30,000 certificates to migrate, about 97% issued via ACME).",
   "source": "mozilla-bug"
  },
  {
   "date": "2026-10-22",
   "event": "Apple products block the certificates. eMudhra announces it will exit the global SSL/TLS certificate business.",
   "source": "wahp"
  },
  {
   "date": "2026-10-27",
   "event": "Chrome Root Store v43, which removes emSign ECC Root CA - G3, is expected in Chrome Stable on Tuesday morning (PDT).",
   "source": "chrome-bug-comment"
  }
 ],
 "deadline": {
  "date": "2026-10-27",
  "label": "Chrome removes emSign ECC Root CA - G3",
  "source": "chrome-bug-comment"
 },
 "compromised": [
  {
   "name": "EM DV TLS CA - G3B",
   "subject": "CN=EM DV TLS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "emSign Root TLS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "tls",
   "sha256": "42C4ACCD12C4F59597925E1A08A7A90102608543809308D50EC427E118BA1493",
   "sha1": "A99B289464F3B44343270A7A1E910F02370483FE",
   "spki": "EBED6475C2C2D80FCB199F3FE8DD6E6B3CE60B77EB15D4E42C3DEC0C6F5B5105",
   "ski": "E21E2FE71C19390E554B62C120245735248A2514",
   "aki": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "A4AEE678F23362B4C0E460B772F214",
   "notBefore": "2025-04-30T15:54:08Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:24:32Z",
   "crtshCaId": 409703
  },
  {
   "name": "EM DV TLS CA - G3B",
   "subject": "CN=EM DV TLS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "tls",
   "sha256": "45A883F349AEDFD5F3A649B5498FFB121712BA8B448F3F2A91DBC5A766FCDDBE",
   "sha1": "1396BE1372BC93DFA2A433CA964DBA91548A6E57",
   "spki": "EBED6475C2C2D80FCB199F3FE8DD6E6B3CE60B77EB15D4E42C3DEC0C6F5B5105",
   "ski": "E21E2FE71C19390E554B62C120245735248A2514",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "A024FDF4BA665C785CE4A020483858B7",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409703
  },
  {
   "name": "EM OV TLS CA - G3B",
   "subject": "CN=EM OV TLS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "emSign Root TLS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "tls",
   "sha256": "98B896625C0C230ADEEC3EB2CF6AAD5001ECF9156A68644E82374CE5833BC25B",
   "sha1": "5F014E0DB3BB8F950E0598AB280846D383FC57BE",
   "spki": "43BFFA19D6EF651451F6841E019931E96F6F2EAEFF28AB4B6F1CE4576DE2717B",
   "ski": "9BD86551AFE7E72C37AD08EE6919D9BF3784AE0A",
   "aki": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "6CADA367FB1C100088120EA202D568",
   "notBefore": "2025-04-30T16:00:12Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:37:19Z",
   "crtshCaId": 409707
  },
  {
   "name": "EM OV TLS CA - G3B",
   "subject": "CN=EM OV TLS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "tls",
   "sha256": "5F1DED4DD590AF74631290CF073B122A2AAC6A1FA479778A0BD43579BD832699",
   "sha1": "5DFA19197D1C1CF629AF7C0CD865543C5050227C",
   "spki": "43BFFA19D6EF651451F6841E019931E96F6F2EAEFF28AB4B6F1CE4576DE2717B",
   "ski": "9BD86551AFE7E72C37AD08EE6919D9BF3784AE0A",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "E94223BDE92F914E5AB9ACABFDAC3710",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409707
  },
  {
   "name": "EM EV TLS CA - G3B",
   "subject": "CN=EM EV TLS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "emSign Root TLS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "tls",
   "sha256": "E7568FE6E12331F4FD7DE61DA4C7559D0F8EB192A218D4741A3BA75184333838",
   "sha1": "F33ACD1F5D31AA81AC18C72C928446226D3D5914",
   "spki": "E0254C7FCDC265E2F0F8A428DABB75AB4AE039B4872D62F5EE57F0877D5A8A41",
   "ski": "3EDC20D9894698877B873FD88147B25C15D84706",
   "aki": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "C7C41EFE92D825F05EAE841A4A82C1",
   "notBefore": "2025-04-30T16:03:31Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:28:53Z",
   "crtshCaId": 409699
  },
  {
   "name": "EM EV TLS CA - G3B",
   "subject": "CN=EM EV TLS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "tls",
   "sha256": "579480AEA166290BD3C643589E795FC0D0E54E86505D180F1DFF99EFD3199512",
   "sha1": "19069BD6533BFF93FB67C71FB3376B4EA7402C3B",
   "spki": "E0254C7FCDC265E2F0F8A428DABB75AB4AE039B4872D62F5EE57F0877D5A8A41",
   "ski": "3EDC20D9894698877B873FD88147B25C15D84706",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "D8F8685E4F2BD9D82402A85A1C1EB731",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409699
  },
  {
   "name": "EM DV TLS CA - G3C",
   "subject": "CN=EM DV TLS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "emSign Root TLS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "tls",
   "sha256": "0164D7CEAE5BB909C272AF151FF44B1177AE9B47D9424B94F1D9558C30934D19",
   "sha1": "8AD23BC78845D6FAAE1D534BAC89F0E36BA55A11",
   "spki": "49DD353DC2B919A3770645117D0E60C16115E7D1BC259EEFE734B00EA434FE5F",
   "ski": "AE7E105C3C2996C1A847270559F1E03DD4E50AF3",
   "aki": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "588B2E3C2BB8CDA13E1A1209254321",
   "notBefore": "2025-04-30T15:35:09Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:27:07Z",
   "crtshCaId": 409698
  },
  {
   "name": "EM DV TLS CA - G3C",
   "subject": "CN=EM DV TLS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "tls",
   "sha256": "62B7F9868263F72F6911FC78CEAF72C1979158B7368BF648683BB2AA39B02E72",
   "sha1": "4B0944C14F8C2CCBA4E4F32104AD920FA15EE331",
   "spki": "49DD353DC2B919A3770645117D0E60C16115E7D1BC259EEFE734B00EA434FE5F",
   "ski": "AE7E105C3C2996C1A847270559F1E03DD4E50AF3",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "91F347F1A5B7D39962B95E0EE4E299D1",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409698
  },
  {
   "name": "EM OV TLS CA - G3C",
   "subject": "CN=EM OV TLS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "emSign Root TLS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "tls",
   "sha256": "CB6E15165AC802E9B3F993F16C25D41F4E81C21EBDE71AE1B012AC00BF9C7C3F",
   "sha1": "7FCC31AAB874CE6C8EE8584F54CFD08646B54117",
   "spki": "63ECEFEE431D49523BC1136C4E72D0206A477086CAF606CD5CF025686C109CF8",
   "ski": "34EAEA0CEBC90ADAF9D0C5E2ED9B78C9879E1B6C",
   "aki": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "296926C227A3A1526392B19482A504",
   "notBefore": "2025-04-30T15:37:41Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:38:46Z",
   "crtshCaId": 409689
  },
  {
   "name": "EM OV TLS CA - G3C",
   "subject": "CN=EM OV TLS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "tls",
   "sha256": "7485B51C0ED192878FA1D2F948FB529AE1842CC5086C4B67F7BE5B2039DE9489",
   "sha1": "305FC1E253DCAB71B95D4995DAE3CB09D562F22A",
   "spki": "63ECEFEE431D49523BC1136C4E72D0206A477086CAF606CD5CF025686C109CF8",
   "ski": "34EAEA0CEBC90ADAF9D0C5E2ED9B78C9879E1B6C",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "8D5A4811939EF447D77111CDD9849AE9",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409689
  },
  {
   "name": "EM EV TLS CA - G3C",
   "subject": "CN=EM EV TLS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "emSign Root TLS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "tls",
   "sha256": "432EC25F0D28DE9006D97BF752F17BBB2CD41F669933FCB072D9A1148D0261F3",
   "sha1": "C988F3D0CC1629FFC43165D6464C9B6EF73D6E48",
   "spki": "5C0660A2B164910D8FF589C18E14552E9E0EC237DCEFE2CB736D41A4811F81A0",
   "ski": "A6255E80A94DB7F3967C1BC791DF92BCEE4BEB5F",
   "aki": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "8009928A64107601AF05FA2F19F109",
   "notBefore": "2025-04-30T15:39:31Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:30:49Z",
   "crtshCaId": 409694
  },
  {
   "name": "EM EV TLS CA - G3C",
   "subject": "CN=EM EV TLS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "tls",
   "sha256": "FD9D5C2DBBD4995AB69B8D50C439D9527B00529199C2FD01B2174EB58F07021F",
   "sha1": "8588708E875A1F8AA83524F3559080F7E17068C7",
   "spki": "5C0660A2B164910D8FF589C18E14552E9E0EC237DCEFE2CB736D41A4811F81A0",
   "ski": "A6255E80A94DB7F3967C1BC791DF92BCEE4BEB5F",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "05F078752DECE7A1BB8595D303167171",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409694
  },
  {
   "name": "EM OV CS CA - G3B",
   "subject": "CN=EM OV CS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "emSign Root CS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "code-signing",
   "sha256": "9E39DE2881273ACC225A149C72BA3E0F51424963669AB633EE1DC7DF5DB067B4",
   "sha1": "D33195A244046A3263FB5E0E83C6803A5B2E7BC3",
   "spki": "EC4FFA1AD0AC88081314B7AAFFEF6A91F97CD57291BB5BA686C5415F5EB4F6B6",
   "ski": "79FAE8ECCFDB0D758DA458D69FB6EDDC7C49DEE6",
   "aki": "687403F885CA8D5450571D16E0C8DE450DABCD2D",
   "serial": "7818933F8F85B4619A2B35FBA83D0A",
   "notBefore": "2025-04-30T16:08:27Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:33:37Z",
   "crtshCaId": 409701
  },
  {
   "name": "EM OV CS CA - G3B",
   "subject": "CN=EM OV CS CA - G3B,O=eMudhra BV,C=NL",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "code-signing",
   "sha256": "A496E23AC0CAB8155FC9B117B97EAE368EFCBB9041AEC8804D5A308D2D01C2D8",
   "sha1": "EE26D7AE3CC71718F6E07D7D0095076F0C158F63",
   "spki": "EC4FFA1AD0AC88081314B7AAFFEF6A91F97CD57291BB5BA686C5415F5EB4F6B6",
   "ski": "79FAE8ECCFDB0D758DA458D69FB6EDDC7C49DEE6",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "41E32B73AC185D6CE0D7480BACF84E69",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409701
  },
  {
   "name": "EM OV CS CA - G3C",
   "subject": "CN=EM OV CS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "emSign Root CS CA - G3",
   "issuerOperator": "eMudhra",
   "usage": "code-signing",
   "sha256": "4B2460A466F95FD40113BCDCCA2CEB29B3B093921DE45474DA7DF48874C630B1",
   "sha1": "1F4A5D178F8B6A8EF0F6784155BD5FEA91158B12",
   "spki": "92C063D67E8F14DB71D288E11266FFDAF69CBF115F7BAB14F3BC2F68D25E0E30",
   "ski": "EE6F73298D6FBFA7B31BC39534F61556447866B7",
   "aki": "687403F885CA8D5450571D16E0C8DE450DABCD2D",
   "serial": "544B7F922C31AE220A4A922916F6E6",
   "notBefore": "2025-04-30T16:38:40Z",
   "notAfter": "2040-04-28T18:30:00Z",
   "revoked": true,
   "revokedAt": "2026-10-18T09:35:24Z",
   "crtshCaId": 409697
  },
  {
   "name": "EM OV CS CA - G3C",
   "subject": "CN=EM OV CS CA - G3C,O=eMudhra Inc,C=US",
   "issuedBy": "AAA Certificate Services",
   "issuerOperator": "Sectigo",
   "usage": "code-signing",
   "sha256": "84112972B8E59D14560AE7E7119654474AAD119990CF3722BFC1E3B91615E1FD",
   "sha1": "7FDE64753A957B98F172FD2AB0D922551909C7BA",
   "spki": "92C063D67E8F14DB71D288E11266FFDAF69CBF115F7BAB14F3BC2F68D25E0E30",
   "ski": "EE6F73298D6FBFA7B31BC39534F61556447866B7",
   "aki": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "D6A5EF613B390F32EF9CDF349F772841",
   "notBefore": "2025-05-14T00:00:00Z",
   "notAfter": "2028-12-31T23:59:59Z",
   "revoked": true,
   "revokedAt": "2026-10-19T10:35:36Z",
   "crtshCaId": 409697
  }
 ],
 "hierarchyRoot": "emSign ECC Root CA - G3",
 "hierarchy": [
  {
   "name": "emSign Root TLS CA - G3",
   "usage": "tls",
   "crtshCaId": 296740,
   "spki": "C619E4780ED8E0ABEDA24AD732567DE4383A7EA941338F6D1A7D1B49AC792FE9",
   "ski": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "subject": "CN=emSign Root TLS CA - G3,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "7DD78D5F4F13459A83DFF9ABBBA62EDBAF6F2D102BF257FD712F4D9F2746ED8D",
     "sha1": "39D3236E4A609AB6190CBFA1AD02B3CC61DFC2C3",
     "serial": "0E760672F143459FC8FE0AB0BC05E394",
     "notAfter": "Feb  7 08:19:32 2049 GMT"
    },
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "3094025792039A68AF6E553686410BDAB7C0D4A36B9084CBA64202E35D6EBBDD",
     "sha1": "1A1A03E05D574805B548D93014302256EFB1E242",
     "serial": "961A3EFB1359576ED04005B4684A5B",
     "notAfter": "Jul  9 18:30:00 2039 GMT"
    }
   ]
  },
  {
   "name": "emSign TLS CA - G3",
   "usage": "tls",
   "crtshCaId": 369322,
   "spki": "EEF5DE4A7457BCB5EF97D075CF337FC8209E4BC2473ECF681127EE7DA0194CFA",
   "ski": "65D4B55737F54458610C6C2F3D7555EAB02A6033",
   "subject": "CN=emSign TLS CA - G3,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "04E6DEA261B8720E0525E9DA23282100352BDEBC119CFC3DBD812C3D68A2BCDD",
     "sha1": "1685CF1337401C9C74B0CBDC03F6B46ABA07043A",
     "serial": "3B6ECEC869F677EFF33445C0E3EDC5",
     "notAfter": "Jul  8 18:30:00 2039 GMT"
    }
   ]
  },
  {
   "name": "EM DV TLS CA - G3A",
   "usage": "tls",
   "crtshCaId": 409688,
   "spki": "D45CE41F3B285436B8FD3E2B68E500F2835DD737035F2BCC489E9E48CF0CCCD8",
   "ski": "F6E3DC04A13FF4E06D9492C73EB079DBB8B29A4F",
   "subject": "CN=EM DV TLS CA - G3A,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "C83980CF0440CDEA950BE2C13CC1090F04B8D77E0D50E977588DBDDB11CC6DA9",
     "sha1": "4E1B3CE69A49AB4B8B38E2EEA2B814A7B0585603",
     "serial": "217B2D6D167EC0A6A9FA3E0B283311",
     "notAfter": "Apr 28 18:30:00 2040 GMT"
    },
    {
     "issuedBy": "AAA Certificate Services",
     "sha256": "7C71CF3473266C9DBF9C98A504F74982E839CDEE481F52934C4BDDDCD87E98BB",
     "sha1": "2788D4A8F7A3EED96CCEF03C10C5385434CB2025",
     "serial": "B92D730340324B0EC01BECE20C7A068E",
     "notAfter": "Dec 31 23:59:59 2028 GMT"
    }
   ]
  },
  {
   "name": "EM EV TLS CA - G3A",
   "usage": "tls",
   "crtshCaId": 409696,
   "spki": "D8AAA5319DE5242EC1734B988BDF330FEC7DBD38206CAF76656EE4836A216876",
   "ski": "560A58D46979EA13E92D4A9FAE8C0BEF0F0E954E",
   "subject": "CN=EM EV TLS CA - G3A,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "8344188BCBD9CECB9397436878DE8918D6D4521EFDB6BDE2A30E520847F22901",
     "sha1": "DAF2FEB6511EF5F6C7A8B8CBCE37761C50328335",
     "serial": "15E599DA4E0962CBEE3926BDB98A8B",
     "notAfter": "Apr 28 18:30:00 2040 GMT"
    },
    {
     "issuedBy": "AAA Certificate Services",
     "sha256": "E21D0AE9D727D235C3078EFD155B3C20E019FA323A6BE24F93F70F1EDC92B351",
     "sha1": "DE2005626175337EB3D6C160A4042BF5BC6C3687",
     "serial": "65FDE0FA6658006F80AED0CB6453EA0C",
     "notAfter": "Dec 31 23:59:59 2028 GMT"
    }
   ]
  },
  {
   "name": "EM OV TLS CA - G3A",
   "usage": "tls",
   "crtshCaId": 409705,
   "spki": "32159657965E44EC9B1B7F0933475009E50479A0FAE1DFBB236A8DAD4FF7A6A6",
   "ski": "ED43BAF6C9C19F8D2023DEE1482032D28FD82069",
   "subject": "CN=EM OV TLS CA - G3A,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "775BB88FB7FECCCA55B5B216DF40A23F52129EF647EA2077CADDEE798DEF9EB0",
     "sha1": "48A01F6D0A3789C3FFE80B49B5589F62488991A5",
     "serial": "62F09EB8DA2043FDCD29F9FFD46460",
     "notAfter": "Apr 28 18:30:00 2040 GMT"
    },
    {
     "issuedBy": "AAA Certificate Services",
     "sha256": "E91CAD3A096E6C8A19B85435B215D1B7424E47BF9BFC51FDCDA95B822134D460",
     "sha1": "57B48D4B13A496012F512696F3306B97599B596A",
     "serial": "76F23860C44B974AF092E649A89605D0",
     "notAfter": "Dec 31 23:59:59 2028 GMT"
    }
   ]
  },
  {
   "name": "EM OV TLS CA - G3A-1",
   "usage": "tls",
   "crtshCaId": 414064,
   "spki": "4AA7E0E79901D2709E94750E98A013E64DCBDC219C23BDEA36B0AFAAEC4F12D9",
   "ski": "064EB599F6619B45B99556FE7DC6A115FCD5D11D",
   "subject": "CN=EM OV TLS CA - G3A-1,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "259FF0963A0665BF40D92E05E95B960CCB423DBD117482AE647BC7FD5F5CE644",
     "sha1": "0ED6568EA3A4056E1FFD66C6351F11A0D8BBD4C5",
     "serial": "C5FB5F2D43071F5B5623B5D132878C",
     "notAfter": "May 28 07:41:16 2040 GMT"
    },
    {
     "issuedBy": "AAA Certificate Services",
     "sha256": "1159D471B5746802C2F2CB2FFFE6D5C332B9319BD52ACEBFA93AEC07544E7C5D",
     "sha1": "47CE2876C0D945655D54169BC314CC16A77A10BA",
     "serial": "ADA1791F3D515E1A4080D208AE888A01",
     "notAfter": "Dec 31 23:59:59 2028 GMT"
    }
   ]
  },
  {
   "name": "EM DV TLS CA - G3A-1",
   "usage": "tls",
   "crtshCaId": 414069,
   "spki": "2FF90B0E2BD10089C13500A8CB86BEE9027F7A71F12A1C074AA07BB8A08E2724",
   "ski": "AB289683693EC44971F5148A654721A37022B653",
   "subject": "CN=EM DV TLS CA - G3A-1,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "4896D51F6537A5326272C412BC75990E15D4F5ECDC2946C19776923B8E169E93",
     "sha1": "F8EC08769B1A4C4AEDC7E2BA971ACC8DABE51139",
     "serial": "A3E5AD9D0C0374A342E5E2A3F506DD",
     "notAfter": "May 28 07:37:34 2040 GMT"
    },
    {
     "issuedBy": "AAA Certificate Services",
     "sha256": "ECB8D30846BEF4B340C90152659F452FD81A7A4F41429B890F1E2B3467058565",
     "sha1": "5EA02F534051A1B379B867DB1873532C42E61C31",
     "serial": "FBF771754D6A8760263B3E115432593F",
     "notAfter": "Dec 31 23:59:59 2028 GMT"
    }
   ]
  },
  {
   "name": "EM EV TLS CA - G3A-1",
   "usage": "tls",
   "crtshCaId": 414070,
   "spki": "F8DB20C2D076249967BEEA91EC27C954A5D405863E0ED1231C3B8C7F1FBFC7FF",
   "ski": "4ABAB87355C26A1BF9F600BB6EB262157EC70B12",
   "subject": "CN=EM EV TLS CA - G3A-1,O=eMudhra Technologies Limited,C=IN",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "BA0A3DA706F47DAC1A9C33C4EE1E4D86B726EF48E70D4319F3C949EC673A1975",
     "sha1": "9EEA5071B5442D70D3ABD4B5EA663884233DA545",
     "serial": "B28971D9989A629CA9B4E206067211",
     "notAfter": "May 28 07:44:09 2040 GMT"
    },
    {
     "issuedBy": "AAA Certificate Services",
     "sha256": "D62657961AC9C5A9A522549E34CADE585ECBFD3869A780C97EDF52E0EC90CEFC",
     "sha1": "2792BDC7966F5FEF75209D91CFB0C3DCBE97E47A",
     "serial": "AABA43C0D684BA96FE14CE7397A4EE35",
     "notAfter": "Dec 31 23:59:59 2028 GMT"
    }
   ]
  },
  {
   "name": "InCommon Intermediate CA - DVG3C",
   "usage": "tls",
   "crtshCaId": 439880,
   "spki": "73F0C5BE28DC503CD970AD9C452348306D43A38E956979DC1F5A0BF8B039CF64",
   "ski": "5BD5002C75E0A2DAC0285E82F28E447E01888F37",
   "subject": "CN=InCommon Intermediate CA - DVG3C,O=Internet2,C=US",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "3460C02F0B4B06C2739CB0DE17B41062B94515D837652AEBFF77AE87E0930CFF",
     "sha1": "A2428A5E67B52A3F774271771D3BF5AD23C33460",
     "serial": "CE966707D5D28A7AE8AB6F00631B4F",
     "notAfter": "Apr  7 19:59:38 2029 GMT"
    }
   ]
  },
  {
   "name": "InCommon Intermediate CA - EVG3C",
   "usage": "tls",
   "crtshCaId": 439881,
   "spki": "6AA600DE06D8E834C2F1835A2766AD685D179B871B02D7BB6EC208680AD25397",
   "ski": "7DC8B66109204294C47FA01745C63FDD9B381BBC",
   "subject": "CN=InCommon Intermediate CA - EVG3C,O=Internet2,C=US",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "5F2F050F9CDD928FE50102244733CBA7EA72204D9A7686949CE59E402AD1AAB9",
     "sha1": "ACFA5F6D59A0C52BCFF70745B34EF3382A2708D0",
     "serial": "C61D1CF77FA6D4C88875A43BEB4AE4",
     "notAfter": "Apr  7 20:03:19 2029 GMT"
    }
   ]
  },
  {
   "name": "InCommon Intermediate CA - OVG3C",
   "usage": "tls",
   "crtshCaId": 439882,
   "spki": "E842A02A225A2377F842A6F0C245688CD8940BCC8CBF1E11A73C80F29889C3D2",
   "ski": "390BB7AA1B9ADAA61B989CA8BC8744996E240062",
   "subject": "CN=InCommon Intermediate CA - OVG3C,O=Internet2,C=US",
   "certs": [
    {
     "issuedBy": "emSign Root TLS CA - G3",
     "sha256": "566B3AF3CB6663A9F9E21EEF820889C2D1A4EA2F7DF0B7BB0D5060249870FA08",
     "sha1": "F842C879536202AB8C0B362DF02380D944BC8DAE",
     "serial": "66A11F396CE7BD4EFB9EB96208D6F3",
     "notAfter": "Apr  7 20:01:32 2029 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC EV SSL CA - G3",
   "usage": "tls",
   "crtshCaId": 96917,
   "spki": "7F4D74D75A846857FA5AAAB7C322500AEF7A3F5A7821AE1F606F55FFB43A3EEE",
   "ski": "D1AAB4D2D225824EB3F09360174A9B637AF91F0D",
   "subject": "CN=emSign ECC EV SSL CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "0116F17F97CDEF4ADE2E63CF2C1B064FD99F404D2B914100BC241F0781853323",
     "sha1": "F493BA18C52CD604BC2F83D2AE833EA3C4B43BCC",
     "serial": "01FE3E6C68DEBBEC263E",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC EV CS CA - G3",
   "usage": "code-signing",
   "crtshCaId": 96922,
   "spki": "10999CC87382EE51772DE4F6B40E8D11E880ADA388780F52D54629B74DB191F3",
   "ski": "FA5CF7B7494D5D6BF03228E1E5D5ADFAFAD5BC83",
   "subject": "CN=emSign ECC EV CS CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "0BADA979B71402FE860696032CF40E9D2A3F41CCB5D03BE33FBB94A80D7FFC7C",
     "sha1": "19BFC8B8DCE05B7F85D4C2446929DB47BE95A0F7",
     "serial": "23BA23AB486AE7D5C0FE",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC CS CA - G3",
   "usage": "code-signing",
   "crtshCaId": 96923,
   "spki": "0A11949B826E7D00A0C5F8D310B2D0D53F77F8402E03742B70A28550094A09DA",
   "ski": "E61AAE5A798CD0284D37E09E6BC52D5DB46CF8EB",
   "subject": "CN=emSign ECC CS CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "0D6869A2B4F5DF77A6AFB034225E9BEF345743CF306EDF36EE35B9D05AFAD89C",
     "sha1": "7ACFBE44D3DB16BC4185718CD3679009D0A6AF0F",
     "serial": "35CF922FB9008249F89C",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC Class 2 CA - G3",
   "usage": "other",
   "crtshCaId": 96927,
   "spki": "7BA89C4D89EA3C07AA472895E93D59F9D78F8407E3656F516F3162FBF87CE344",
   "ski": "E016FEBDC4E165C6A5994C895E718ED45D67F1FD",
   "subject": "CN=emSign ECC Class 2 CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "4E9B731567177E1776A96D66D9120B3DEB28B800937EA4662565B3EF5EC8000B",
     "sha1": "C0E0788EF68B18C5186DAB9F0C528196101240E5",
     "serial": "23E1BA02DFF3E900EDDD",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC SSL CA - G3",
   "usage": "tls",
   "crtshCaId": 96931,
   "spki": "F4ED3C5EA849E062B9AA318D1FD218DB85D0C611AFF1DB056DB64304F370D710",
   "ski": "138D4C2899E162B7D2E053E318D162DC1CCA66FA",
   "subject": "CN=emSign ECC SSL CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "6B51D1DCF4EB7AEE424185CB1B9580574B39CB963863DE3EC1AD31DDB076CE9F",
     "sha1": "C8FF98254C49E3EAC36E8B77C128EF157132C634",
     "serial": "72DDC7E9DCE9B0DCFFC7",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC Class 3 CA - G3",
   "usage": "other",
   "crtshCaId": 96932,
   "spki": "8C26973807C965211C676B2F287279353209A709D0898B27923FEB39238DE945",
   "ski": "22624ABC7E6DA130B72AC9957E2A23DE3D27F38D",
   "subject": "CN=emSign ECC Class 3 CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "7066A0F42F530E0DB5AFEE72A3B04DE614E7D2305C67D12C756BB215E37CB975",
     "sha1": "F133C939104EA6028254B67986B9DFDA13B3D347",
     "serial": "B8EB258324DB08ACC2F5",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC Device CA - G3",
   "usage": "other",
   "crtshCaId": 96933,
   "spki": "C844C56A21F48EAC0437ECB3BBAA476ED9A3804E57CD3DDDBE68BF5B36F7D613",
   "ski": "A5ACF91F5A258E10B029DA19002686E8A1E6E8D9",
   "subject": "CN=emSign ECC Device CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "70B9BA595412CF8614B76747FD683CCA2759F42642164834FBEFDD88505C4F1C",
     "sha1": "EC0F71896A0B0E67EAF99300346D0ADAD906513E",
     "serial": "876282A8FD758C391EC3",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "emSign ECC Class 1 CA - G3",
   "usage": "other",
   "crtshCaId": 96937,
   "spki": "562F740CA039A1E6E3FE76B9006FBC103D803B1A7F7B3C564EDBE24B5E23A50E",
   "ski": "46BE80C3C827FEEC9B582B1A625DB2D5D1023868",
   "subject": "CN=emSign ECC Class 1 CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "certs": [
    {
     "issuedBy": "emSign ECC Root CA - G3",
     "sha256": "ABA6A65DCE8955BAF0685AB88809B7699C174496EF9EE991533251494F43CE10",
     "sha1": "CF1BBAEAC2D9226A587924A48DFDC03336526182",
     "serial": "FB1E21982EB1B55C5925",
     "notAfter": "Feb 18 18:30:00 2033 GMT"
    }
   ]
  },
  {
   "name": "EM OV CS CA - G3A",
   "usage": "code-signing",
   "crtshCaId": 409711,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "EM OV CS CA - G3A-1",
   "usage": "code-signing",
   "crtshCaId": 414073,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "emSign CS CA - G3",
   "usage": "code-signing",
   "crtshCaId": 369320,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "emSign Root CS CA - G3",
   "usage": "code-signing",
   "crtshCaId": 296743,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "emSign ECC SMIME CA - G3",
   "usage": "other",
   "crtshCaId": 272195,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "emSign Root SMIME CA - G3",
   "usage": "other",
   "crtshCaId": 296745,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "emSign Root Client Auth CA - G3",
   "usage": "other",
   "crtshCaId": 296747,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  },
  {
   "name": "emSign Root TSA CA - G3",
   "usage": "other",
   "crtshCaId": 296742,
   "spki": null,
   "ski": null,
   "subject": null,
   "certs": []
  }
 ],
 "roots": [
  {
   "name": "emSign Root TLS CA - G3",
   "operator": "eMudhra",
   "role": "direct_issuer",
   "subject": "CN=emSign Root TLS CA - G3,O=eMudhra Technologies Limited,C=IN",
   "sha256": "7DD78D5F4F13459A83DFF9ABBBA62EDBAF6F2D102BF257FD712F4D9F2746ED8D",
   "sha1": "39D3236E4A609AB6190CBFA1AD02B3CC61DFC2C3",
   "spki": "C619E4780ED8E0ABEDA24AD732567DE4383A7EA941338F6D1A7D1B49AC792FE9",
   "ski": "E13AAB217CF1E34D54AED472B7FD8B5942209054",
   "serial": "0E760672F143459FC8FE0AB0BC05E394",
   "notAfter": "2049-02-07T08:19:32Z",
   "storeStatus": {
    "apple": "Not Included",
    "chrome": "Not Included",
    "microsoft": "Included",
    "mozilla": "Not Included"
   }
  },
  {
   "name": "emSign Root CS CA - G3",
   "operator": "eMudhra",
   "role": "direct_issuer",
   "subject": "CN=emSign Root CS CA - G3,O=eMudhra Technologies Limited,C=IN",
   "sha256": "F2EDAAFF3D9B701FB4D14C9F285F8C0BAD90FC3BCC1FA07D47F4718EDABA34A5",
   "sha1": "1F74B6010A219FD9CA058D07AA053D15EFD9300D",
   "spki": "0A6C2B2CA5B364207954171987AC9D2178561569D8205457E77CA90C32EDE282",
   "ski": "687403F885CA8D5450571D16E0C8DE450DABCD2D",
   "serial": "018FCEC927C116F59C997EDC0CCD2E2B",
   "notAfter": "2049-02-07T08:33:14Z",
   "storeStatus": {
    "apple": "Not Included",
    "chrome": "Not Included",
    "microsoft": "Included",
    "mozilla": "Not Included"
   }
  },
  {
   "name": "AAA Certificate Services",
   "operator": "Sectigo",
   "role": "direct_issuer",
   "subject": "CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB",
   "sha256": "D7A7A0FB5D7E2731D771E9484EBCDEF71D5F0C3E0A2948782BC83EE0EA699EF4",
   "sha1": "D1EB23A46D17D68FD92564C2F1F1601764D8E349",
   "spki": "BD153ED7B0434F6886B17BCE8BBE84ED340C7132D702A8F4FA318F756ECBD6F3",
   "ski": "A0110A233E96F107ECE2AF29EF82A57FD030A4B4",
   "serial": "01",
   "notAfter": "2028-12-31T23:59:59Z",
   "storeStatus": {
    "apple": "Included",
    "chrome": "Removed",
    "microsoft": "Included",
    "mozilla": "Removed"
   }
  },
  {
   "name": "emSign ECC Root CA - G3",
   "operator": "eMudhra",
   "role": "cross_signer",
   "subject": "CN=emSign ECC Root CA - G3,O=eMudhra Technologies Limited,OU=emSign PKI,C=IN",
   "sha256": "86A1ECBA089C4A8D3BBE2734C612BA341D813E043CF9E8A862CD5C57A36BBE6B",
   "sha1": "3043FA4FF257DCA0C380EE2E58EA78B23FE6BBC1",
   "spki": "8D417DB2DD8BF5E3084D1E3F196D583849D81BDD4C00C70B9D39369E96B8C782",
   "ski": "7C5D028413D4CC8A9B81CE171C2E291E9C486342",
   "serial": "3CF607A968700EDA8B84",
   "notAfter": "2043-02-18T18:30:00Z",
   "storeStatus": {
    "apple": "Included",
    "chrome": "Included",
    "microsoft": "Included",
    "mozilla": "Included"
   }
  }
 ],
 "emudhraMarkers": [
  "eMudhra",
  "emSign"
 ],
 "testHosts": [
  {
   "host": "dv-g3b-emudhra.we-have-a-problem.com",
   "ca": "EM DV TLS CA - G3B",
   "root": "emSign Root TLS CA - G3"
  },
  {
   "host": "dv-g3c-emudhra.we-have-a-problem.com",
   "ca": "EM DV TLS CA - G3C",
   "root": "emSign Root TLS CA - G3"
  },
  {
   "host": "ov-g3b-emudhra.we-have-a-problem.com",
   "ca": "EM OV TLS CA - G3B",
   "root": "emSign Root TLS CA - G3"
  },
  {
   "host": "ov-g3c-emudhra.we-have-a-problem.com",
   "ca": "EM OV TLS CA - G3C",
   "root": "emSign Root TLS CA - G3"
  },
  {
   "host": "ev-g3b-emudhra.we-have-a-problem.com",
   "ca": "EM EV TLS CA - G3B",
   "root": "emSign Root TLS CA - G3"
  },
  {
   "host": "ev-g3c-emudhra.we-have-a-problem.com",
   "ca": "EM EV TLS CA - G3C",
   "root": "emSign Root TLS CA - G3"
  },
  {
   "host": "dv-g3b-aaa-emudhra.we-have-a-problem.com",
   "ca": "EM DV TLS CA - G3B",
   "root": "AAA Certificate Services"
  },
  {
   "host": "dv-g3c-aaa-emudhra.we-have-a-problem.com",
   "ca": "EM DV TLS CA - G3C",
   "root": "AAA Certificate Services"
  },
  {
   "host": "ov-g3b-aaa-emudhra.we-have-a-problem.com",
   "ca": "EM OV TLS CA - G3B",
   "root": "AAA Certificate Services"
  },
  {
   "host": "ov-g3c-aaa-emudhra.we-have-a-problem.com",
   "ca": "EM OV TLS CA - G3C",
   "root": "AAA Certificate Services"
  },
  {
   "host": "ev-g3b-aaa-emudhra.we-have-a-problem.com",
   "ca": "EM EV TLS CA - G3B",
   "root": "AAA Certificate Services"
  },
  {
   "host": "ev-g3c-aaa-emudhra.we-have-a-problem.com",
   "ca": "EM EV TLS CA - G3C",
   "root": "AAA Certificate Services"
  },
  {
   "host": "dv-g3b-noct-emudhra.we-have-a-problem.com",
   "ca": "EM DV TLS CA - G3B",
   "root": "emSign Root TLS CA - G3",
   "noct": true
  },
  {
   "host": "dv-g3b-aaa-noct-emudhra.we-have-a-problem.com",
   "ca": "EM DV TLS CA - G3B",
   "root": "AAA Certificate Services",
   "noct": true
  }
 ],
 "testBody": "Your client successfully connected to the site.",
 "testControl": "https://statistics-emudhra.we-have-a-problem.com/stats.json",
 "patched": [
  {
   "group": "Runtimes",
   "name": "Go",
   "key": "go",
   "fixed": [
    "1.27.3",
    "1.26.10"
   ],
   "note": "Go 1.25 and older get no fix: rebuild with a fixed release."
  },
  {
   "group": "Runtimes",
   "name": "Node.js",
   "key": "node",
   "fixed": [
    "26.12.1",
    "24.22.1",
    "22.23.4"
   ]
  },
  {
   "group": "Runtimes",
   "name": "Python",
   "key": "python",
   "fixed": [
    "3.15.1",
    "3.14.9",
    "3.13.17"
   ]
  },
  {
   "group": "Runtimes",
   "name": "Java (OpenJDK / Oracle JDK)",
   "key": "java",
   "fixed": [
    "27.0.1",
    "25.0.5",
    "21.0.13",
    "17.0.21",
    "11.0.33",
    "1.8.0_511"
   ]
  },
  {
   "group": "Runtimes",
   "name": "Bun",
   "key": "bun",
   "fixed": [
    "1.4.4"
   ]
  },
  {
   "group": "Runtimes",
   "name": "Deno",
   "key": "deno",
   "fixed": [
    "2.9.8"
   ]
  },
  {
   "group": "Runtimes",
   "name": "Electron",
   "key": "electron",
   "fixed": [
    "44.9.1",
    "43.8.1",
    "42.11.16"
   ]
  },
  {
   "group": "Libraries",
   "name": "Python certifi",
   "key": "certifi",
   "fixed": [
    "2026.10.19"
   ]
  },
  {
   "group": "Libraries",
   "name": "NSS",
   "key": "nss",
   "fixed": [
    "3.131.1"
   ]
  },
  {
   "group": "Libraries",
   "name": "Rust webpki-roots",
   "key": "webpki-roots",
   "fixed": [
    "1.0.10"
   ]
  },
  {
   "group": "Libraries",
   "name": "Rust rustls-webpki",
   "key": "rustls-webpki",
   "fixed": [
    "0.103.16"
   ]
  },
  {
   "group": "Libraries",
   "name": "curl CA bundle (cacert.pem)",
   "key": "curl-bundle",
   "fixed": [
    "2026-10-20"
   ]
  },
  {
   "group": "Libraries",
   "name": "Perl Mozilla::CA",
   "key": "mozilla-ca",
   "fixed": [
    "20261020"
   ]
  },
  {
   "group": "Libraries",
   "name": "Elixir castore",
   "key": "castore",
   "fixed": [
    "1.0.22"
   ]
  },
  {
   "group": "Tools",
   "name": "pip",
   "key": "pip",
   "fixed": [
    "26.2.2"
   ]
  },
  {
   "group": "Tools",
   "name": "uv",
   "key": "uv",
   "fixed": [
    "0.13.4"
   ]
  },
  {
   "group": "Tools",
   "name": "Docker Desktop",
   "key": "docker-desktop",
   "fixed": [
    "4.96.2"
   ]
  },
  {
   "group": "Tools",
   "name": "Conda",
   "key": "conda",
   "fixed": [
    "26.9.4"
   ]
  },
  {
   "group": "Tools",
   "name": "ArgoCD",
   "key": "argocd",
   "fixed": [
    "3.3.18"
   ]
  },
  {
   "group": "Distros",
   "name": "Ubuntu ca-certificates",
   "key": "ubuntu",
   "fixed": [
    "20260816ubuntu0.22.04.1",
    "20260816ubuntu0.24.04.1",
    "20260816ubuntu0.26.04.1",
    "20260816ubuntu0.26.10.1"
   ]
  },
  {
   "group": "Distros",
   "name": "Debian ca-certificates",
   "key": "debian",
   "fixed": [
    "20250419~deb12u2",
    "20250419+deb13u1",
    "20260816+nmu1"
   ]
  },
  {
   "group": "Distros",
   "name": "Alpine ca-certificates",
   "key": "alpine",
   "fixed": [
    "20261020-r0"
   ]
  },
  {
   "group": "Distros",
   "name": "Fedora ca-certificates",
   "key": "fedora",
   "fixed": [
    "2026.2.92_v9.0.319"
   ]
  },
  {
   "group": "Distros",
   "name": "Arch ca-certificates-mozilla",
   "key": "arch",
   "fixed": [
    "3.131.1-1"
   ]
  },
  {
   "group": "Distros",
   "name": "RHEL 6–10",
   "key": "rhel",
   "fixed": [],
   "note": "Workaround only at the time of writing (RHSB-2026-012)."
  }
 ],
 "storeActions": [
  {
   "store": "Chrome",
   "action": "CRLSet block of the 6 TLS intermediates (17 Oct). Root Store v43 removes emSign ECC Root CA - G3 (expected in Stable 27 Oct, PDT).",
   "source": "chrome-bug-comment"
  },
  {
   "store": "Firefox / NSS",
   "action": "OneCRL block (17 Oct). emSign ECC Root CA - G3 removed in NSS 3.131.1. Firefox 158.0.1, ESR 115.43.1 and 153.5.1 for clients that can't receive OneCRL.",
   "source": "mozilla-blog"
  },
  {
   "store": "Microsoft",
   "action": "Certificates blocked through the automatic certificate trust list update (20 Oct).",
   "source": "wahp"
  },
  {
   "store": "Apple",
   "action": "Certificates blocked (by 22 Oct).",
   "source": "wahp"
  }
 ],
 "sources": [
  {
   "id": "mozilla-bug",
   "title": "Mozilla Bugzilla 2083449: eMudhra private key compromise of intermediate certificates",
   "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083449"
  },
  {
   "id": "chrome-bug-comment",
   "title": "Chrome Root Program questions to eMudhra (Bug 2083449, comment 30)",
   "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c30"
  },
  {
   "id": "google-blog",
   "title": "Google: Protecting Chrome and Android users from compromised eMudhra intermediate CA certificates",
   "url": "https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/"
  },
  {
   "id": "mozilla-blog",
   "title": "Mozilla Security Blog: Protecting Firefox users following the compromise of eMudhra intermediate certificates (20 Oct 2026)",
   "url": "https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/"
  },
  {
   "id": "wahp",
   "title": "eMudhra Intermediate CA Compromise: certificate list, test hosts and patch tracker",
   "url": "https://emudhra.we-have-a-problem.com/"
  },
  {
   "id": "wahp-json",
   "title": "impacted-intermediates.json and roots.json (we-have-a-problem.com)",
   "url": "https://emudhra.we-have-a-problem.com/impacted-intermediates.json"
  },
  {
   "id": "emudhra-statement",
   "title": "eMudhra statement on recent certificate security incident",
   "url": "https://emudhra.com/en/post/certificate-security-incident"
  },
  {
   "id": "emudhra-exit",
   "title": "eMudhra to exit global SSL/TLS certificate business (press release)",
   "url": "https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business"
  },
  {
   "id": "go",
   "title": "golang-announce: Go 1.27.3 and 1.26.10 (CVE-2026-111943)",
   "url": "https://groups.google.com/g/golang-announce/c/66pojueaQek"
  },
  {
   "id": "ms-ctl",
   "title": "Microsoft Learn: automatic certificate trust list updates",
   "url": "https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/certificate-trust#automatic-certificate-trust-list-updates"
  },
  {
   "id": "thn",
   "title": "The Hacker News: Eight eMudhra CA keys compromised",
   "url": "https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html"
  },
  {
   "id": "crtsh",
   "title": "crt.sh: emSign ECC Root CA - G3 and its subordinate CAs",
   "url": "https://crt.sh/?caid=96593"
  }
 ]
}