eMudhra's Flawed Key Ceremony Put Eight Trusted CA Keys Within Trivial Reach

A script error in an April 2025 HSM key ceremony left eight trusted intermediate CAs with private keys under 256. The incident exposes weaknesses in CA oversight, CRL handling and the slow tail of revocation.