It's kinda crazy that every single connection we make trusts certificates made by God Knows Who. Internet is broken as hell. If web3 really took off as web - we would not need to trust those CAs at all
So the private-key for the eMudhra (revoked) intermediate was apparently 4.
How is the root still trusted? How broken are your processes if this can happen?
And honestly: How have we (as an industry) not noticed earlier :(