# eMudhra exits global TLS certificates after weak-key disclosures

- URL: https://talkfuse.com/story/disgraced-indian-cert-issuer-leaves-the-cert-issuing-business/
- Published: 2026-10-22T16:58:25+00:00
- Updated: 2026-10-22T17:40:51+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/22/disgraced-indian-cert-issuer-leaves-the-cert-issuing-business/5304848
- Topics: Asia, World

## Key points

- eMudhra is withdrawing from global SSL/TLS certificates.
- Reports found eight weak keys, including one valued at 4.
- The company says no end-entity certificates were issued by the affected authorities.

## Summary

Indian certification authority eMudhra is leaving the global SSL/TLS certificate business after reports exposed eight weak private keys, including one with the value 4. The company said the scrutiny contributed to its decision, alongside rising compliance costs and competition from free certificate providers.

The affected keys belonged to eight intermediate certificate authorities, which could potentially have enabled forged certificates, though eMudhra says they issued no end-entity certificates. It says it revoked the authorities within 14 hours of discovering the issue and that no infrastructure or data was compromised. eMudhra will publish a root-cause report, honour remaining browser programme commitments and move customers to other issuers free of charge.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.