eMudhra quits global TLS certificate market after compromise of CA signing keys
Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is offering customers certificates issued by Sectigo as an alternative, following the compromise of private keys behind eight of its intermediate certificate authorities. The company’s board decided “to voluntarily withdraw from the global SSL/TLS certificate business,” eMudhra said…
Indian digital trust firm eMudhra is exiting the global SSL/TLS certificate market after private keys linked to eight of its intermediate certificate authorities were compromised. The company has offered affected customers certificates from Sectigo as a replacement. eMudhra's Chairman V Srinivasan said data sovereignty and compliance requirements had made the business increasingly complex and costly.
The company will maintain revocation and certificate status services until all issued certificates have expired or been replaced. Sectigo's In addition, eMudhra will provide replacement certificates free of charge through its partners. Analysts have advised organizations to view the compromised G1 root certificates as a potential bridge rather than a final solution, and to set a deadline for migrating to an independent, fully trusted certificate authority. Java systems may require separate fixes, as they may not automatically update their trust stores.
Written by urgent.news from Computerworld's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
