eMudhra are now blocking access to their certificate revocation list

A Mozilla Bugzilla report says eMudhra's revocation hosts (crl, ocsp, ocsp-b, repository) return 403 over HTTP to clients whose User-Agent contains curl, Wget, Python-urllib or libwww-perl, while other agents get valid CRLs. The reporter says this includes CRLs for the eight compromised intermediates, and cites 417 of 417 refused requests. The test data is the reporter's own, and the claim check could not verify these figures independently. For anyone building certificate-checking software, a default HTTP client may fail to fetch revocation data, and no eMudhra reply was recorded.