Intermediate CA keys hacked.

The intermediate certificates belong to India-based certificate authority eMudhra Limited. The private keys were revealed to the Internet, which means almost anyone can conduct a Man-in-the-middle attack. The private keys sizes were embarrassingly short.

The CA cert is an approving seal (aka stamp) and it got stolen. An attacker can use the keys to approve the traffic to you.

https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/