Rehearse CA distrust before browser vendors force it: eMudhra's key compromise…

Rehearse CA distrust before browser vendors force it: eMudhra's key compromise shows CA key failures can break certificate trust for any client that relies on the affected roots or intermediates. Browser blocks and revocations coordinated by vendors don't guarantee the same behavior in non-browser runtimes, so don't assume those actions protect every client. Inventory issuing CAs, add an alternate issuance path for critical names, and practice emergency reissuance so you can rotate certificates and restore trust on your schedule.