One thing rarely mentioned around the #eMudhra whoopsie is that the whole #PKI scheme was designed to be resilient by having many CAs.

It was just a matter of time that another issue surfaced.
This is by far not the first time a CA is having a problem.

So yea, you *can* distrust, revoke, etc..

If you are running (critical) infra, please consider a Principle of Least Trust approach. I.e., only explicitly trust those few CAs that are really involved in your service(s).
Another checklist item ✅️.