Gross incompetency from Indian certificate authority eMudhra.

You had one job: generate a 384 bit private keys and instead you used: 4, 56, 66, 115, 155, 156, 230, and 237.

This allows attackers to issue certificates for any websites.

Embarrassing that it’s a family business run by largely computer illiterate people. Only 1 of the 3 have a remotely computer-related background and even they never actually worked a technical job in their life. If you look at the LinkedIn, their tech team is young, from tier 3 education and paid sort of bottom barrel.

Imagine how many attacks you can design with AI given the existence of this genre of gross negligence.