eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise

eMudhra has revoked 8 more intermediate CAs — six for TLS and two for code signing — that it had previously declared unaffected by its October key compromise, after determining that the same key-ceremony script pulled their RSA keys from its hardware security modules and that it cannot demonstrate the key material was handled as its own rules require. The revocations use the cessationOfOperation reason rather than keyCompromise; eMudhra is exiting the publicly trusted TLS business, and Microsoft, Chrome, Firefox and Apple are removing trust in its roots through November.