Eight eMudhra intermediate keys from a weak 2025 ceremony can be derived from the public certificates. Browsers blocked the chains. An unpatched JVM still trusts them until blocked.certs or the later cacerts removal is applied on that JDK.
What broke
Eight keys, signed twice: 16 certs. Eight under emSign G3, eight cross-signed by Sectigo AAA.
Browsers
Blocklists from 17 to 20 Oct, plus Certificate Transparency. The test site shows 0 of 12 connections.
The JVM
cacerts is a file in the JDK. Certificate Transparency is off. Revocation checks stay off.
False fix
Deleting only emsigneccrootcag3 leaves the six *-aaa-emudhra chains trusted.
Block the 16 intermediates
Append the 48 SHA-256 fingerprints from the article to $JAVA_HOME/lib/security/blocked.certs.
Or remove the four roots
keytool -delete the three emSign roots and comodoaaaca [jdk] from cacerts.