Commit

**A certificate authority's private key was the number 4. Your curl still trusts it.** CVE-2026-111943: the private keys of **eight eMudhra (emSign) intermediate CAs** — chained to roots trusted by Mozilla, Microsoft, Apple and Chrome — were mis-generated. The top 376 bits of…