eMudhra To Exit Certificate Business As Security Flaw Triggers Distrust
Bengaluru-based eMudhra revealed it will voluntarily wind down its global SSL/TLS certificate business after a researcher discovered weak private keys in eight intermediate certificate authority certificates that could be recovered. Google and Mozilla subsequently distrusted eMudhra's certificates, severely impacting its TLS business. The company revoked affected CAs within 14 hours and confirmed no end-entity certificates were issued by them, no infrastructure compromise, and no data breach. The decision followed other factors including rising compliance costs, declining returns, and the segment accounting for only ~1% of ₹701.6 Cr in FY26 revenues.
Key points
- Security flaw in intermediate CA private keys led to browser distrust
- Affected certificates revoked within 14 hours of discovery
- Certificate business represents only ~1% of company revenue
- Closure driven by security incident, compliance costs, and weak prospects
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Inc42 did the reporting; read the original for the full story.
Read the full story at Inc42
