🔒eMudhra Abandons Global SSL/TLS Cert Business After Key Compromise
eMudhra pulls the plug on global SSL/TLS certs
TL;DR
eMudhra is exiting the global SSL/TLS certificate market after a key compromise. The company's decision is driven by security concerns and the rise of free cert issuance from large firms.
eMudhra has decided to abandon its global SSL/TLS certificate issuing business after one of its private keys was compromised. The company acted swiftly, revoking the affected CAs within 14 hours. This move comes as free SSL/TLS cert issuance from large firms and increased compliance requirements make the business less viable. If you're relying on eMudhra for SSL/TLS certificates, expect to transition to other issuers. The compromised keys belonged to eight intermediate CAs, with values ranging from 4 to 237. eMudhra's infrastructure and data remain secure, but the business contributes only 1% of global revenue.
Key Points
eMudhra revokes eight affected CAs within 14 hours of discovering the key compromise.
Compromised keys belonged to eight intermediate CAs, with values from 4 to 237.
eMudhra's certificate infrastructure had been in browser trust lists since mid-2025.
The company's infrastructure and data were not compromised as a result of the key issue.
eMudhra will continue to serve G1 RSA roots until transitioning customers to other issuers.
Why It Matters
If you're using eMudhra for SSL/TLS certificates, you'll need to transition to another issuer. The compromised keys affected eight intermediate CAs, but eMudhra's infrastructure remains secure. The decision to exit the market is driven by security concerns and the rise of free cert issuance from large firms.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.