Mozilla confirmed that eight eMudhra intermediate certificates (six TLS, two code-signing) had flawed key generation that made the private keys trivially recoverable, using integers below 256. Mozilla distrusted them via OneCRL within hours and eMudhra later revoked them as caCompromise, while the Sectigo cross-signs remained unrevoked.

— via Hacker News (top 30), IcePenguin