eMudhra to Exit Global SSL/TLS Certificate Market Following Security Weakness
Indian certificate authority eMudhra is withdrawing from the global website security sector after researchers discovered critical flaws in its cryptographic keys.
eMudhra, one of India's 14 licensed certificate authorities, has announced its exit from the global SSL/TLS certificate market. The decision follows reports by cybersecurity researchers on October 17 identifying that eight of the company's intermediate certificates utilized weak private keys, leaving systems vulnerable to impersonation and data interception.
Following the discovery, major browser vendors including Google, Mozilla, Microsoft, and Apple revoked the affected certificates. While the company stated that no end-entity data was compromised, Chairman V. Srinivasan noted that the board opted for withdrawal due to mounting compliance costs, intense market competition from free providers, and the reputational risks associated with the incident.
The firm clarified that its other operations, including digital signature certificates and identity verification services, will remain operational. The Indian Computer Emergency Response Team (CERT-In) has since issued an advisory regarding the risks of such vulnerabilities, while eMudhra continues to coordinate with affected clients to transition their security certificates.