The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.

In addition to the test on the linked site, vulnerability can also be checked using this link, which either returns "oh no" (vulnerable client) or a revoked certificate error (not vulnerable): https://bgptools.emsign.filippo.io/generate_200