Hacker News Reader

If I understood correctly, emudhra was able to issue certificate to any website.

Therefore if some device trusts emudhra root certificate...

Google usually does certificate pinning. They know that the CA root store is not to be trusted to sign for their own domains.

I assume that devices unable to do certificate revocation will also not do certificate pinning.