Choose Rich Live
Tech

eMudhra to exit global SSL/TLS certificate business following security incident

Indian digital trust firm eMudhra is voluntarily pulling out of the global SSL/TLS certificate business after a vulnerability revealed eight private keys that were easily guessable.

Indian digital trust services provider eMudhra announced on Thursday that it will voluntarily withdraw from the global SSL/TLS certificate business, according to reports by Reuters. The company stated that the exiting product line accounts for approximately 1% of its total revenue.[1][2][3][6]

The exit follows disclosures that TLS certificates had been compromised by private keys spanning just 3 to 8 bits, leaving eight intermediate certificate authority private keys easily guessable.[1][3][6]

In response to the incident, eMudhra co-founder Kaushik Srinivasan spoke with The Hindu's Aroon Deep on Thursday, October 22, 2026, addressing the security event that led to the exposure of the eight private keys.[4][5]

Key facts

  • eMudhra is voluntarily exiting the global SSL/TLS certificate business following a security incident.
  • The SSL/TLS certificate unit accounts for about 1% of eMudhra's revenue.
  • The vulnerability involved compromised TLS certificates with private keys of just 3 to 8 bits, making eight intermediate CA private keys easily guessable.
  • Eight private keys linked to web security certificates were exposed during the incident.
  • eMudhra co-founder Kaushik Srinivasan discussed the key exposure in an interview with The Hindu on October 22, 2026.

Sources · 6 sources

  1. TE

    TechmemeArticle ·

    eMudhra says it will exit the SSL/TLS certificate business, 1% of its revenue, after its TLS certificates with private keys of just 3 to 8 bits were compromised (Abhirami G/Reuters) Abhirami G / Reuters : eMudhra says it will exit the SSL/TLS certificate business, 1% of its revenue, after its TLS certificates with private keys of just 3 to 8 bits were compromised — Indian digital trust services provider eMudhra (EMUD.NS) on Thursday said it would voluntarily withdraw from the global SSL/TLS …

    Open source
  2. RE

    Reuters@ReutersPost on X ·

    Indian firm eMudhra exits global digital certificates business after vulnerability disclosure https://t.co/Vy8hRXWOHH https://t.co/Vy8hRXWOHH

    Open source
  3. TE

    Techmeme@TechmemePost on X ·

    eMudhra says it will exit the SSL/TLS certificate business, 1% of its revenue, after its TLS certificates with private keys of just 3 to 8 bits were compromised (@abhiiswriting / Reuters) (Visit Techmeme dot com for the link and full context!)

    Open source
  4. TH

    The Hindu@the_hinduPost on X ·

    #Watch | In this exclusive interview, eMudhra co-founder Kaushik Srinivasan spoke to @AroonDeep on Thursday, October 22, 2026, about the security incident in which eight private keys associated with web security certificates were exposed. https://t.co/96SUX1m3Ex

    Open source
  5. TH

    The Hindu@the_hinduPost on X ·

    #Watch | In this exclusive interview, eMudhra co-founder Kaushik Srinivasan spoke to @AroonDeep on Thursday, October 22, 2026, about the security incident in which eight private keys associated with web security certificates were exposed. https://t.co/96SUX1m3Ex

    Open source
  6. ㆅ

    ㆅ@howfxrPost on X ·

    Indian certificate authority @eMudhra plans to exit the global SSL/TLS certificate business after researchers found eight intermediate certificate private keys that were easily guessable. The company says the business contributes about 1% of its revenue. 🧵 https://t.co/Lcu5lYk2G1

    Open source
  7. BT

    Business Today@business_todayPost on X ·

    #TechToday | eMudhra to exit global SSL/TLS certificate business after security incident https://t.co/Fe7zRbwY7T

    Open source