Indian certificate authority (CA) eMudhra is withdrawing from its global SSL/TLS certificate business after a researcher demonstrated the recovery of private keys for eight of its intermediate CA certificates. A flaw in the key generation process allowed attackers to derive these keys, potentially enabling the issuance of fraudulent TLS or code-signing certificates. Major platform vendors like Chrome, Mozilla, and Apple have already revoked and blocked the affected certificates, highlighting the severity of this trust compromise.