eMudhra to exit global SSL/TLS certificate business after controversy

Digital trust services provider eMudhra on Thursday said that it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident where its certificates were found to have vulnerabilities.

eMudhra revealed on Wednesday that private keys associated with its certificates have been compromised, which verify trusted digital assets and ensure secure online data transmission, according to an advisory from the cybersecurity watchdog Cert-In.

eMudhra issues certificates for digital signatures that are used for several online transactions by all kinds of business entities.


PKI consists of several components, including public and private keys, for digital assets in mathematical codes used for encryption, digital certificates issued to websites as a mark of trust, etc.

TLS (Transport Layer Security) certificates, popularly associated with HTTPS websites, are a set of security protocols that ensure data transmission among digital assets, like browsers and apps, in a secure manner.

eMudhra, in a statement, said the incident has no connection with eMudhra’s Indian Digital Signature Certificate (DSC) and eSign businesses but affected a small part of global TLS business.