Does anyone replace cacert after the issue with emudhra CA?

RouterOS General
1

I heard the news relating to ssl certificate just yesterday and replaced cacert on my router already, does any one also following that?

2

I'm not seeing any of the intermediate and root certificates mentioned on https://emudhra.we-have-a-problem.com/ in /certificate/builtin print, so that means there's nothing to fix, right?

3

I'm pretty sure that if you haven't manually imported any of emudhra certs in by default there's only digicerts and few others that have 0 relation to emudhra, so why would i?

4

Changelog
ca-certificates (20260816ubuntu0.26.04.1) resolute-security; urgency=medium

  • Blacklist the following CA cert due to intermediate cert compromise
    (LP: #2171507)
    • "emSign ECC Root CA - G3"

If you have that cert, Remove it.

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449

transitioned to hierarchies chaining to emSign Root CA - G1.

Publishing details

Changelog

ca-certificates (20260816ubuntu0.26.04.1) resolute-security; urgency=medium

  * Blacklist the following CA cert due to intermediate cert compromise
    (LP: #2171507)
    + "emSign ECC Root CA - G3"
  * Update Mozilla certificate authority bundle to version 2.90
    The following certificate authorities were added (+):
    + "SECOM TLS ECC Root CA 2024"
    + "SECOM TLS RSA Root CA 2024"
    + "Telia EC TLS Root CA v3"
    + "Telia RSA TLS Root CA v3"
    The following certificate authorities were removed (-):
    - "Atos TrustedRoot 2011"
    - "Entrust Root Certification Authority"
    - "SecureSign Root CA12"
    - "ePKI Root Certification Authority"

 -- Marc Deslauriers <email address hidden>  Tue, 20 Oct 2026 09:03:26 -0400
5

This is not a RouterOS issue,
so I don’t see a need to open a discussion about it on this forum as well.

6

Just passing info...