Microsoft’s response to compromised eMudhra certificate authority keys

Microsoft reported an issue involving eight eMudhra intermediate certificate authority private keys: six associated with TLS and two with code signing. Because the keys could be recovered, they could potentially have been used to create certificates or sign content that appeared to come from a trusted certificate authority. Microsoft states that the issue arose in eMudhra’s certificate hierarchy and was not a compromise of Microsoft systems.