Could be related to the eMudhra Intermediate CA compromise.
https://emudhra.we-have-a-problem.com/
Discussed here: https://news.ycombinator.com/item?id=50177916