tl;dr: eMudhra issued eight intermediate CA certificates in April 2025 whose P-384 private keys were tiny single-byte numbers (like 4, 56, 115), making them recoverable from the public certs in milliseconds. Browsers like Chrome and Firefox have blocked the intermediates and are protected by Certificate Transparency, but non-browser TLS clients (curl, Python, Node, Go, IoT devices, CI/CD pipelines, Windows code-signing) typically don't check revocation or CT and remain vulnerable until bundles are updated—or, for frozen-firmware devices, until the certs expire in 2039. eMudhra attributes the incident to a buggy key-ceremony script and human error.