eMudhra Quits Global TLS Business Following Severe Private Key Vulnerability

31 Oct 2026, 4:02 pm · 3h ago · 1 min read · Inc42New

Bengaluru-based eMudhra, India's largest licensed certifying authority, has exited the global TLS certificate business after critical security vulnerabilities were exposed. Security researchers discovered that private keys across eight certificate authorities under eMudhra's hierarchy were easily guessable. In response, Google, Apple, and Mozilla swiftly blocked the certificates, triggering browser warnings for affected websites. While eMudhra stated that the segment contributed only 1% of its overall revenue, India's Ministry of Electronics and Information Technology (MeitY) has launched a formal investigation to determine potential regulatory breaches and accountability standards.