Intermediate CA
A subordinate certificate authority issued by a root CA and authorized to issue certificates for routine use; its private key is often distributed to subordinate organizations or used for automated issuance, and its protection strength is typically lower than that of a root CA.
Timeline (last 90 days)
The private keys of eight intermediate CA certificates of the Indian certificate authority eMudhra were leaked.
After the intermediate CA private keys leak, attackers could theoretically forge valid TLS certificates for any domain.
In the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
An intermediate CA is a certificate authority issued and authorized by a root CA, performing day-to-day certificate issuance on behalf of the root CA.
All Facts (4)
After the intermediate CA private keys leak, attackers could theoretically forge valid TLS certificates for any domain.
50%UnverifiedIn the PKI system, root certificates are usually kept offline and rarely issue end-entity certificates directly, while intermediate CAs handle day-to-day issuance duties.
50%UnverifiedAn intermediate CA is a certificate authority issued and authorized by a root CA, performing day-to-day certificate issuance on behalf of the root CA.
50%UnverifiedThe private keys of eight intermediate CA certificates of the Indian certificate authority eMudhra were leaked.
50%