eMudhra Statement on Recent Certificate Security Incident
See also: https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c82 Comments
eMudhra has announced the phase out of emSign G1 TLS certificates and provided an update on the scheduled transition. According to the major browser root programs, the phase out will take effect on specific dates for Chrome and Mozilla, and all certificates issued under the G1 hierarchy will cease to be trusted on Apple platforms. eMudhra has already migrated most of its emSign TLS certificates to alternative providers, with the exception of the US region where a large number of customers are still transitioning.
The company has appointed KPMG as its independent external reviewer to address the incident and bring clarity to the matter. Approximately 30,800 certificates issued under the affected G3 hierarchies belong to a client ecosystem in the United States, which is currently transitioning using eMudhra's G1 RSA root pathway. eMudhra will stop issuing TLS certificates from G1 once the transition is complete.
The free migration to alternate providers for unaffected TLS customers remains available without any charges. The Global eSignature and Enterprise Solutions business are unaffected by this incident. eMudhra remains committed to its PKI and Digital Identity businesses and will continue to invest in research and development, expanding its offerings and reach in various markets.
Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
