eMudhra to Exit Global SSL/TLS Certificate Business After Key Incident
Indian digital trust company eMudhra (BSE: 543533 / NSE: EMUDHRA) has announced its board's decision to voluntarily exit the global SSL/TLS certificate business and refocus on core enterprise solutions and other trust services. The move follows a recent SSL/TLS certificate incident that triggered intense criticism on social media, with many observers arguing that the reputational pressure was the real reason behind the exit.
Confirmed
- eMudhra's official press release announced the board's decision to voluntarily exit the global SSL/TLS certificate business, framing it as a proactive strategic shift (m3/m4/m5).
- The company's key defenses: the affected CA was revoked within 14 hours of discovery with timely disclosure; no end-entity certificates were issued; no infrastructure compromise; no data breach (m3/m4/m5).
Unconfirmed
- Whether the exit is truly a "proactive strategic shift" as claimed: developer shobhitic argued the real driver was the collapse of trust after the certificate incident played out on social media (m1/m2). basedjensen joked it was a preemptive "you can't fire me, I quit" move; cloud security figure QuinnyPig sarcastically noted the real problem wasn't that eMudhra messed up in itself.
Why it matters
- CAs underpin the web's global trust system. Even when a certificate incident is handled quickly on the technical side (revocation within 14 hours, no malicious certificates actually issued), a collapse of public trust on social media can end an institution's entire business line — a stark reminder of how decisive public trust is to a CA's survival.
2026-10-22 ~ 2026-10-23 · 6 related posts
- Episode 1: Indian CA eMudhra issued 8 intermediate certs with trivially weak private keys(2026-10-21, 44 posts)
- Episode 2: eMudhra weak-key scandal: ceremony flaw admitted, 8 intermediate certs revoked(2026-10-22, 6 posts)
- Episode 3: mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys(2026-10-22, 2 posts)
- Episode 4: Mozilla opens P1 investigation into eMudhra intermediate CA key leak(2026-10-22, 2 posts)
- Episode 5: eMudhra to Exit Global SSL/TLS Certificate Business After Key Incident(2026-10-22, 6 posts)
Primary sources
- eMudhra exits global SSL/TLS certificate business after bypass controversy — Scott_Helme ·
- Indian CA eMudhra quits TLS business after keys ranked #4 were cracked in milliseconds — sidjustice_ ·
- eMudhra to exit global SSL/TLS certificate business after incident, blames social media scrutiny — AIFlow_ML ·
- eMudhra exits CA business amid trust concerns, dubbed a face-saving move — basedjensen · 2026-10-22
- eMudhra to Exit Global SSL/TLS Certificate Business After Recent CA Incident — jedisct1 · 2026-10-23
- CA emudhra exits certificate business after botched cert incident and social media backlash — kingslyj · 2026-10-23
- [source] Indian CA eMudhra quits TLS business after keys ranked #4 were cracked in milliseconds — sidjustice_ · 2026-10-23
2 near-duplicate retellings: Scott_Helme · AIFlow_ML