- A certificate authority (CA) is an organization that vouches for website certificates. According to the source, the private keys of 8 eMudhra intermediate certificates were confirmed to be compromised, and Mozilla and Chrome blocked them.
- The source author Scott Helme states from his own experiment that because the private key values were very small, he could compute the key in less than 1 seconds using only the public certificate. This is the author's claim, and the source does not contain any independent 3rd-party verification of it.
- Chrome blocked the intermediate certificate via CRLSet, and Firefox via OneCRL. The source says Mozilla removed the eMudhra root certificate with an NSS update.
- The source explains that Chrome enforces Certificate Transparency (CT, a public record of certificate issuance) and that no TLS certificates issued by that CA were in CT logs. By contrast, the author wrote that many non-browser programs such as curl, Python, and Node do not check revocation or CT by default.
O: This is useful for a DevOps engineer in charge of certificate trust settings who wants to list which CA bundle the internal CI runners and installation scripts use.
X: The original text should point out that the results come from the author's own experiment and that no independent verification reproduced in other environments has been confirmed. The actual impact on devices that are hard to update is not quantified in the original text.