eMudhra exits the global certificate business to focus on Core Enterprise

SENSEX 73,249.39

 -460.30

NIFTY 22,687.65

 -123.70

CRUDEOIL 9,338.00

+ 130.00

GOLD 143,876.00

 -2,203.00

SILVER 201,700.00

 -7,468.00

SENSEX 73,249.39

 -460.30

NIFTY 22,687.65

 -123.70

NIFTY 22,687.65

 -123.70

CRUDEOIL 9,338.00

+ 130.00

CRUDEOIL 9,338.00

+ 130.00

GOLD 143,876.00

 -2,203.00

'; } document.getElementById("lgdv").innerHTML = htmlElements; } function numberformat(i) { return Number(parseFloat(i).toFixed(2)).toLocaleString('en', { minimumFractionDigits: 2 }) } async function gatherResponse(response) { const { headers } = response; const contentType = headers.get('content-type') || ''; if (contentType.includes('application/json')) { return await response.json() } return response.text(); } function getWidth() { if (Math.max(document.body.scrollWidth,document.documentElement.scrollWidth,document.body.offsetWidth,document.documentElement.offsetWidth,document.documentElement.clientWidth) > 991) { document.getElementById("mob").style.display = "none"; document.getElementById("lgdv").style.display = "block"; } else { document.getElementById("mob").style.display = "block"; document.getElementById("lgdv").style.display = "none"; } } getWidth(); THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.

The company will assist affected customers to replace any certificate free of cost from partners through the transition

By Vallari Sanzgiri

Updated - October 22, 2026 at 08:12 PM.

Revocation and certificate status services will continue until all issued certificates expire or are replaced | Photo Credit: NicoElNino

Digital trust company eMudhra announced its decision to exit the global SSL/TLS certificate business entirely following the discovery of a process gap affecting eight security certificates.

“The level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business. In view of this, after detailed deliberations, our board has concluded that withdrawing from global SSL/TLS is the right decision for eMudhra and its shareholders,” said the company in an exchange filing.

Earlier, eMudhra had told businessline that its board would consider structural changes and additional safeguards following script errors in certificates during a key-generation ceremony in April 2025.

Core business focus

Moving away from this segment, eMudhra will sharpen its focus on core enterprise solutions and trust services beyond SSL/TLS.

“Our G1 RSA roots will continue to serve customers until this transition is complete, as we work with browser programmes and our customers to enable this transition. eMudhra will reach out to affected customers to replace any certificate free of cost from partners through the transition,” it said.

Revocation and certificate status services will continue until all issued certificates expire or are replaced. The company will fulfil its remaining commitments to browser root programmes, including submitting a full root-cause report.

Its Global Digital Signature Certificate (DSC), eSign, and other signing services, including those in India, remain unaffected. The same applies to its enterprise PKI solutions (emCA and CertiNext), emSigner eSignature Suite, and identity and authentication solutions (SecurePass and emAS).

Cost impact

Following the meeting, eMudhra has decided to exit the global SSL/TLS business, which accounts for about 1 per cent of its global revenue. According to the company, rising data sovereignty and compliance requirements have increased the business’s complexity and costs over the years. Moreover, some large entities issue SSL/TLS certificates free of charge.

Regarding the incident, the company stated that no end-entity certificates were issued by the affected CA’s. Infrastructure remained secure, and no data was breached. All physical and logical security controls remained intact, said the company.

The eMudhra incident showed how even strong cryptographic algorithms can be undermined by weaknesses in their implementation, key generation or operational controls, as per Vaibhav Koul, Managing Director, Protiviti Member Firm for India

“The response also demonstrates the importance of the broader internet trust ecosystem. Independent security research, CERT-In’s advisory and the actions taken by major browser vendors are helping in containment measures,” he said.

Published on October 22, 2026

THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.Sign into Unlock benefits!

• Access 10 free stories per month
• Get notified by email for early preview to new features, discounts & offers