eMudhra to exit global website security certificate business
The move follows scrutiny over weak cryptographic keys, with eMudhra citing rising compliance costs and declining returns from a business that contributes just 1% of its revenue.
Bengaluru-based digital trust firm eMudhra has announced plans to exit its global SSL/TLS certificate business. The decision was prompted by a security incident involving weak cryptographic keys that were detected after 18 months and subsequently blocked by Google and Mozilla. The company's board determined that rising compliance costs, data sovereignty requirements, and diminishing commercial returns had made the business increasingly complex and costly.
The weak keys, generated in April 2025, could have allowed attackers to impersonate legitimate websites. eMudhra chairman V Srinivasan assured customers that the company had promptly revoked the affected certificates and would replace any lost certificates free of cost. While global SSL/TLS certificates contribute around 1% of the company's revenue, the competition from free certificate providers has also reduced its commercial potential. eMudhra will now focus on its core enterprise solutions and digital trust services.
Written by urgent.news from YourStory's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
