Is this real? This seems so ridiculous it makes me wonder for how long this CA has been in circulation in systems and if it has been exploited by someone previously discovering it in that time (state level actor or not). My old phone running Android 6 does not have any certificate from EMudhra, at the very least.
Apparently they've only been included in early October https://www.mail-archive.com/[email protected]...
its well-known , we took certificates from them for our company. its due for renewal, iam pausing this for now.
I believe these intermediates chained up to a third party root.
It's real.
[dead]
Almost certainly noticed and quietly exploited by a state actor