logoalt Hacker News

gagan2020 • today at 10:12 AM • 0 replies • view on HN

"Importantly, none of the affected intermediate CAs were deployed in production, with the exception of one. Furthermore, none of these intermediate CAs, including the one deployed in production, have issued any end-entity certificates. This has been confirmed through our internal analysis and corroborated by publicly available Certificate Transparency records on crt.sh."

This statement is more discerning than anything else. It raises question about why this certificates exists in first place if not deployed since 2025. Is it deliberate attempt to do compromising of system?

In recent times, Indian Government is becoming quite rogue and don't follow the said procedures. So, it might be related to that as well.