🚨 Six WebPKI Intermediate CAs are compromised.
This is bigger than Heartbleed, but a client-side issue.
Anything that verifies certificates against public roots, like most TLS clients, is/was affected.
Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com
Act now.
@filippo the AAA Certificate Services domains still connect after updating to NSS 3.131.1, is that update only a partial fix?