eMudhra's Controversial Exit from Global SSL/TLS Certificate Market Raises Security Concerns

10/23/2026

Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following...

10/23/2026

eMudhra to exit its global SSL/TLS certificate business after a weak-key incident. Co-founder Kaushik Srinivasan called it a one-off script error as questions remain.

10/22/2026

This follows the discovery of eight eMudhra certificate authorities with weak private keys that could potentially have allowed attackers to create fake website certificates and impersonate...

10/22/2026

Digital trust services provider eMudhra on Thursday said that it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident where its certificates were found to...

10/22/2026

Its Indian digital signature and eSign services will continue to operate as usual

10/22/2026

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported...

10/22/2026

The digital trust firm said the business contributes about 1% of global revenue. It will provide affected customers with replacement certificates at no cost while continuing its other digital...

10/22/2026

eMudhra shares tank twenty percent following a major cybersecurity vulnerability involving weak certification authority keys. The Ministry of Electronics and IT investigates the incident while the...

10/22/2026

8 intermediate Certificate Authority (CA) certificates issued under eMudhra's global web-security banner were allegedly compromised due to cryptographic weaknesses in private keys

10/23/2026

Weak cryptographic keys associated with eight intermediate certificate authorities operated by eMudhra could be reverse-engineered, or recovered, potentially allowing the issue of fraudulent...

10/22/2026

EMudhra security lapse exposes millions to cyber threats after issuing weak digital identity certificates. Discover how browsers blocked vulnerable keys and what website owners must do now to...

10/22/2026

India’s IT ministry has set up a special team to investigate a security lapse involving eight intermediate certificate authorities linked to eMudhra’s global operations. While Google and Mozilla...

10/22/2026

The flaw could have allowed attackers to impersonate websites and make malicious software appear to come from a trusted publisher

10/22/2026

From FIPS to facepalm; when the chain of trust is compromised, everything that uses certificates for that trust has to be checked and updated – and that means everything.

10/22/2026

India’s only certificate issuer trusted by browsers worldwide, eMudhra, is under scrutiny after a researcher found weak security keys in its website certificates. The company calls it a technical...

10/22/2026

The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company's private keys was just the number four.

10/22/2026

The private keys were so weak they could be guessed in under a second — and one of them was just the number 4.

10/22/2026

Says it passed audits and made just a minor mystery error