In October 2026, private keys for eight intermediate Certificate Authorities belonging to eMudhra were compromised. Here is a technical breakdown of the largest CA failure since DigiNotar (2011), why backend infrastructure is blind to WebPKI revocation, and how to patch your systems.