eMudhra to exit global website security certificate business
eMudhra, an Indian digital trust company, has decided to voluntarily withdraw from the global SSL/TLS certificate business following the discovery of eight weakly generated intermediate certificate authority keys that could allow attackers to impersonate websites. The company revoked the affected certificates within 14 hours and disclosed the issue promptly, maintaining that its infrastructure was not compromised and no end-user certificates were issued. The SSL/TLS business contributes only about 1% of eMudhra's global revenue, and the company cited increasing compliance requirements, data sovereignty needs, and competition from free certificate providers as factors driving the exit decisio
Key points
- Eight intermediate certificate keys generated by eMudhra in April 2025 were found to be dangerously weak; Google and Mozilla blocked related certificates.
- Certificates revoked within 14 hours of discovery; company claims no infrastructure compromise or data breach occurred.
- SSL/TLS business represents only ~1% of eMudhra's revenue; exit attributed to rising compliance and sovereignty costs plus free certificate competition.
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. YourStory did the reporting; read the original for the full story.
Read the full story at YourStory
