Could be related to the eMudhra Intermediate CA compromise.

https://emudhra.we-have-a-problem.com/