from the file distributed with 8.0, the emudhra g3 certificate is the only 
known problematic one (we removed the Comodo AAA one mid 2025).

-- 
  Sent from a phone, apologies for poor formatting.

On 21 October 2026 21:08:00 Ralph Siegler <rsiegler@rsiegler.org> wrote:

> On Tue, 20 Oct 2026 19:27:43 +0000, Lloyd wrote:
>
>> With the drama unfolding today around the eMudhra CA key compromise,
>> Mozilla has dropped trust in at least one root CA:
>>
>> https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c18
>>
>> Is this serious enough to issue errata for cert.pem?
>>
>> Regards Lloyd
>
> I manually removed four with eMudhra and emSign in them, and currently am
> looking cross-eyed at a fifth that might be affected.  Better if OpenBSD
> team expert fixes things though 8D