tl;dr: Private keys for eight eMudhra intermediate CA certificates were compromised due to flawed key generation, allowing anyone to recover them from the certificates issued since April 2025. The affected intermediates chain to roots trusted by Mozilla, Microsoft, Apple, and Chrome, all of which have pushed revocations; however, non-browser clients that don't enforce Certificate Transparency or consume revocation data remain vulnerable until software updates (ca-certificates, curl, Go, Node, etc.) are applied. The page provides verification tools and manual workarounds for macOS, Linux, and BSD systems.