eMudhra Flaw Left Weak Certificate Keys Undetected Through Two Audits

The detail that matters here is not the weak key itself but the audit failure: two independent review cycles missed a defect serious enough to force emergency trust updates, which raises questions about how much assurance certificate audits actually provide. Relying parties inherit that gap directly, since their trust in eMudhra-issued certificates rested on reviews that did not catch the problem. Whether the remediation extends beyond the disclosed keys, and whether audit scope or methodology changes follow, is the open question worth watching.