eMudhra To Exit Certificate Business As Security Flaw Triggers Distrust

Bengaluru-based digital trust firm eMudhra has announced plans to exit its global SSL/TLS certificate business. The decision was prompted by a security incident involving weak cryptographic keys that were detected after 18 months and subsequently blocked by Google and Mozilla. The company's board determined that rising compliance costs, data sovereignty requirements, and diminishing commercial returns had made the business increasingly complex and costly.

The weak keys, generated in April 2025, could have allowed attackers to impersonate legitimate websites. eMudhra chairman V Srinivasan assured customers that the company had promptly revoked the affected certificates and would replace any lost certificates free of cost. While global SSL/TLS certificates contribute around 1% of the company's revenue, the competition from free certificate providers has also reduced its commercial potential. eMudhra will now focus on its core enterprise solutions and digital trust services.