eMudhra quit the CA business today. I checked your trust store — its roots are still in it.

Two days after I recovered eMudhra's eight intermediate CA private keys (integers under 256) in 11 ms, eMudhra announced its exit from global SSL/TLS (about 1% of revenue). I checked what actually changed: the local Ubuntu bundle still holds all 3 emSign roots of 121, Mozilla OneCRL (1,907 records, DER-decoded) blocks exactly the 6 compromised TLS intermediates by key, and Bugzilla 2083449 is still ASSIGNED — touched today.