eMudhra to exit global SSL/TLS certificate business after security flaws
eMudhra said it would voluntarily exit the global SSL/TLS certificate business after vulnerabilities were found in its certificates, raising concerns over digital security.
Bengaluru-based digital trust firm eMudhra has announced plans to exit its global SSL/TLS certificate business. The decision was prompted by a security incident involving weak cryptographic keys that were detected after 18 months and subsequently blocked by Google and Mozilla. The company's board determined that rising compliance costs, data sovereignty requirements, and diminishing commercial returns had made the business increasingly complex and costly.
The weak keys, generated in April 2025, could have allowed attackers to impersonate legitimate websites. eMudhra chairman V Srinivasan assured customers that the company had promptly revoked the affected certificates and would replace any lost certificates free of cost. While global SSL/TLS certificates contribute around 1% of the company's revenue, the competition from free certificate providers has also reduced its commercial potential. eMudhra will now focus on its core enterprise solutions and digital trust services.
Written by urgent.news from YourStory's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
