If you use GrapheneOS, updating to 2026102100 (or higher) will take care of this for you.

remove the active eMudhra ECDSA root certificate due to compromised intermediate certificates (Vanadium received the removal of this root certificate as an out-of-band component update via our servers when it was released for Chrome)

remove both legacy eMudhra root certificates (this leaves the heavily used active RSA root certificate as the only remaining one and we’re considering either removing it or disabling it by default despite other platforms not removing it at this time)