A security researcher’s public survey records Indian government domains still serving revoked eMudhra certificates. The original status table identifies affected educational and government services, while the accompanying coverage distinguishes the G3 intermediate-CA key problem from the separate revocation of 9,356 G1 certificates. Browsers differed in blocking the sites at the time of observation; Mozilla’s CRLite documentation provides background on revocation checking. Counts vary by observation date and are not a measure of confirmed harm. Exploitation and the certificate status of unresponsive sites remain unverified.
Back to Tech
Indian government sites continued serving revoked eMudhra certificates
A page loading successfully does not prove certificate validity; separate the revocation incidents and their observation dates.