Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves. Those certificates chained to roots trusted by Chrome, Firefox, Safari and Windows, as well as by operating systems and countless software trust stores.