Enterprise
Microsoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft released out-of-band updates to remove trust in eMudhra certificates after compromise of the certificate authority keys.
Topic
#Certificate Authority
Stories tagged by our AI curator.
Enterprise
eMudhra quits global TLS certificate market after compromise of CA signing keys
Indian digital trust company eMudhra is exiting the global SSL/TLS certificate business after the compromise of private keys at eight of its certificate authorities, offering customers free replacement certificates from Sectigo.
Enterprise
eMudhra to exit global website security certificate business
Bengaluru-based eMudhra exits its global SSL/TLS certificate business after weak cryptographic keys prompted Google and Mozilla to block affected certificates, citing rising compliance costs and diminishing returns.
Also covered by 2 other outlets
Enterprise
Disgraced Indian cert issuer leaves the cert issuing business
eMudhra abandons its global SSL/TLS certificate business after public scrutiny over weak private keys, citing compliance costs and competition from free certificate providers as justification for the exit.
Policy
Little-known eMudhra set the internet on red alert. What really happened?
eMudhra, India's only globally-trusted certificate authority, faces scrutiny over weak security keys discovered in its website certificates, though the company attributes it to a technical flaw rather than a breach.
Enterprise
Certification authority eMudhra defends its laughably weak private keys
Indian certification authority eMudhra acknowledged that weak private keys used to sign digital certificates, including one as simple as the number "4," were generated during a key ceremony in April 2025, creating a security risk for websites and resources.
Policy
eMudhra Weak Link Tests India’s Chain Of Digital Trust
eMudhra's discovery of eight compromised intermediate CA certificates, including one with a weak private key, prompted browser makers to revoke trust, exposing vulnerabilities in India's role as a custodian of global digital infrastructure.
Enterprise
eMudhra Takes Remedial Action After Security Researcher Flags Weak Intermediate CA Keys
eMudhra found eight compromised CA certificates with weak keys; the company is taking remedial action after researcher disclosure, with seven never deployed and one unused for end-entity issuance.
Policy
Explained: eMudhra’s weak private keys used to issue website certificates were exposed; what it means
eMudhra, an Indian licensed certificate authority, exposed weak private keys that could issue fraudulent website certificates; the flaw was discovered with AI assistance and prompted browser vendors to block affected certificates.
Enterprise
eMudhra faces scrutiny after weak certificate keys raise web security concerns
eMudhra faces scrutiny after weak intermediate certificate authority keys for its website-security business remained undetected for 18 months, raising HTTPS impersonation risks.
Enterprise
Mozilla, Google, Apple block compromised eMudhra CA certificates
Mozilla, Google, and Apple revoked eight compromised eMudhra intermediate certificates after researchers discovered their private keys were cryptographically weak and easily recoverable.
Enterprise
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Indian certification authority eMudhra's private keys were compromised, including trivially weak ones, invalidating 60+ million issued digital certificates and requiring browser and service remediation.