Will eMudhra issue formal postmortem of CA certificate compromise by Dec 2026?

Certificate authority eMudhra's intermediate certificates were found with cryptographically weak private keys that could be instantly recovered by attackers, enabling trusted website impersonation. Mozilla, Google, and Apple have blocked the certificates. Key question: will eMudhra publish a formal incident postmortem detailing root cause, remediation, and safeguards?

Resolution Criteria

eMudhra official incident postmortem or disclosure statement published on their website, blog, or via press release; must address (a) root cause analysis, (b) scope of affected certificates, (c) timeline of issuance and discovery, (d) remediation steps and timeline. Public statements from major browsers confirming eMudhra's disclosure qualify as supporting evidence.