# eMudhra exits global SSL/TLS business after weak key incident

2026-10-22T16:13:43+00:00 | Governance | Indian Opinion Desk

Corroboration: 30 independent outlets

Digital trust company eMudhra said on Thursday, 22 October, it has decided to exit its global SSL/TLS certificate business after a security incident in which eight intermediate certificates were found to have weak private keys. The company said the segment accounts for around 1 per cent of revenue and no longer justifies the operational complexity and compliance burden. The incident, flagged by a researcher on 17 October, involved keys generated on 30 April 2025 that could be recovered almost instantly. Google, Mozilla, Apple and Microsoft blocked the affected certificates. CERT-In issued an advisory, and MeitY formed a special team to investigate. eMudhra maintained its Indian DSC and eSign services were unaffected and that no end-entity certificates were issued using the weak keys.

## Indian Opinion Analysis

The coverage split along three lines. Business outlets such as Business Standard, Livemint and Fortune India led with the stock crash and market impact, while The Indian Express and Hindustan Times emphasised the severity of the cryptographic failure, quoting security experts who called the weak keys 'potentially catastrophic'. Government-adjacent sources such as MeitY statements, relayed by Business Today, NDTV and The New Indian Express, stressed that Indian DSC and eSign services were unaffected and that the impact on domestic websites was 'very limited'. The Hindu and Open Magazine provided detailed explainers on the technical flaw without editorialising. No source contradicted eMudhra's account that no end-entity certificates were issued. The uniform factual core is the weak-key generation in April 2025 and the swift browser response. CERT-In advisory, 21 October, urged users to update browsers and replace affected certificates.

## Coverage

Coverage: 30 sources, 28 neutral, 2 sensationalist
- business-standard.com (neutral report) <https://www.business-standard.com/markets/news/emudhra-tanks-20-why-it-enabled-services-stock-sank-in-wednesday-s-trade-126102100353_1.html>
  Led with stock crash and company statement on flaw
- livemint.com (neutral report) <https://www.livemint.com/market/stock-market-news/emudhra-share-price-hits-20-lower-circuit-after-researcher-flags-weak-keys-can-the-stock-recover-what-lies-ahead-11792570231752.html>
  Market-focused with analyst support levels
- economictimes.indiatimes.com (neutral report) <https://economictimes.indiatimes.com/news/new-updates/emudhra-certificates-blocked-by-google-and-mozilla-some-legitimate-websites-may-stop-working-from-october-27-heres-what-happened/articleshow/135086691.cms>
  Detailed technical explanation of browser actions
- cnbctv18.com (neutral report) <https://www.cnbctv18.com/technology/cert-in-urgent-advisory-emudhra-private-key-compromise-20016169.htm>
  Led with CERT-In advisory and government response
- indianexpress.com (sensationalist) <https://indianexpress.com/article/technology/tech-news-technology/cert-in-emudhra-certificate-compromise-catastrophic-say-experts-10930785/>
  Opened with 'potentially catastrophic' framing
- timesofindia.indiatimes.com (neutral report) <https://timesofindia.indiatimes.com/city/mumbai/how-a-single-flaw-in-a-key-generation-ceremony-left-bengaluru-based-emudhras-global-tls-certificates-vulnerable-and-what-it-means-for-websites-that-rely-on-them/articleshow/135089174.cms>
  Explained flaw and business distinction clearly
- gadgets360.com (neutral report) <https://www.gadgets360.com/internet/news/emudhra-weak-certificate-keys-compromised-eight-ca-intermediaries-revoked-12215520>
  Focused on Mozilla report and company response
- sentinelassam.com (sensationalist) <https://www.sentinelassam.com/north-east-india-news/assam-news/emudhra-sparks-global-tech-panic-google-and-apple-ban-certificates-after-catastrophic-security-error>
  Used 'global tech panic' and 'catastrophic' language
- timesnownews.com (neutral report) <https://www.timesnownews.com/technology-science/what-is-the-emudhra-security-issue-and-why-everyone-should-take-it-seriously-article-156379523>
  Explainer for general readers on security risk
- businesstoday.in (neutral report) <https://www.businesstoday.in/technology/story/impact-has-been-very-limited-meity-on-emudhra-security-incident-says-indian-dsc-and-esign-unaffected-562927-2026-10-21?utm_source=rssfeed>
  Led with MeitY statement minimising domestic impact
- rediff.com (neutral report) <https://www.rediff.com/news/report/emudhra-certificate-keys-compromised-cyber-fraud-risk-flagged/20261021.htm>
  Combined eMudhra and SBI breach in single article
- thehindubusinessline.com (neutral report) <https://www.thehindubusinessline.com/news/emudhras-flawed-certificate-triggers-cert-in-probe-and-raises-questions-on-digital-trust/article71608033.ece>
  Balanced technical detail with expert criticism
- tv9hindi.com (neutral report) <https://www.tv9hindi.com/technology/government-strict-stance-on-emudhra-security-issue-3941695.html>
  Hindi explainer, stressed MeitY investigation
- hindustantimes.com (neutral report) <https://www.hindustantimes.com/india-news/centre-orders-probe-as-indian-firms-key-making-error-leaves-holes-in-web-security-101792595177645.html>
  Detailed technical failure with expert commentary
- ndtvprofit.com (neutral report) <https://www.ndtvprofit.com/technology/emudhra-security-incident-meity-sets-up-panel-to-probe-security-glitch-cert-in-flags-mitigations-12216346#publisher=newsstand>
  Brief factual note on MeitY probe
- inc42.com (neutral report) <https://inc42.com/buzz/emudhras-security-key-flaw-what-went-wrong-and-why-google-mozilla-stepped-in/>
  Detailed explainer on key weakness and impact
- newindianexpress.com (neutral report) <https://www.newindianexpress.com/india/2026/Oct/21/government-sets-up-special-team-to-probe-emudhra-security-incident-meity-says-indian-impact-very-limited>
  Relayed PTI report on MeitY statement
- ndtv.com (neutral report) <https://www.ndtv.com/india-news/e-signature-services-not-affected-government-on-emudhra-web-security-row-12216969#publisher=newsstand>
  Short statement on government response
- news9live.com (neutral report) <https://www.news9live.com/technology/tech-news/government-constitutes-special-team-to-investigate-security-issue-in-emudhra-certificates-3017908>
  Government-focused with MeitY clarification
- digit.in (neutral report) <https://www.digit.in/news/general/emudhra-under-scrutiny-after-8-digital-certificates-found-vulnerable-full-story-in-7-points.html>
  Point-by-point technical explainer
- deccanherald.com (neutral report) <https://www.deccanherald.com/india/meity-forms-team-to-probe-emudhra-security-incident-says-impact-on-indian-websites-limited-4190574>
  Balanced account of government and company
- thefederal.com (neutral report) <https://thefederal.com/category/business/explained-what-is-the-emudhra-certificate-compromise-about-and-should-you-be-worried-260278>
  Comprehensive explainer with Q&A format
- thehindu.com (neutral report) <https://www.thehindu.com/sci-tech/technology/what-does-emudhras-web-security-key-leak-mean-for-internet-users-explained/article71610069.ece>
  Detailed technical explainer on key compromise
- mathrubhumi.com (neutral report) <https://english.mathrubhumi.com/technology/emudhra-certificate-controversy-weak-keys-browser-block-stock-crash-yp83ktuj>
  Clear breakdown of incident and market impact
- freepressjournal.in (neutral report) <https://www.freepressjournal.in/business/emudhra-share-price-crashes-33-in-just-2-days-know-why-are-investors-selling-the-stock-after-major-cybersecurity-concerns>
  Market-focused with stock price detail
- mid-day.com (neutral report) <https://www.mid-day.com/news/india-news/article/cybersecurity-alert-emudhra-reports-compromise-of-eight-intermediate-ca-certificates-23656317>
  Brief factual summary from agencies
- fortuneindia.com (neutral report) <https://www.fortuneindia.com/technology/emudhra-shares-fall-17-as-meity-probes-pki-security-incident-heres-what-happened/166023>
  Market reaction with company background
- openthemagazine.com (neutral report) <https://openthemagazine.com/technology/emudhra-security-incident-explained-how-weak-digital-keys-raised-global-web-security-concerns>
  Detailed explainer with expert caution
- dtnext.in (neutral report) <https://www.dtnext.in/news/national/special-team-to-probe-emudhra-incident-impact-on-indian-websites-applications-very-limited-govt>
  Government statement relayed faithfully
- thehansindia.com (neutral report) <https://www.thehansindia.com/business/emudhra-to-exit-global-ssltls-certificate-business-after-security-incident-1134688>
  Exclusive: eMudhra to exit global SSL/TLS business

This brief was synthesised by AI from the 30 sources linked above, so one read covers every framing they carry.

Tags: Apple, CERT-In, eMudhra, Google, MeitY, Mozilla
Canonical: https://indianopinion.org/emudhra-exits-global-ssl-tls-business-after-weak-key-incident/
License: Summary and commentary (c) Indian Opinion, reusable with attribution. Facts belong to the linked sources.
Cite: https://indianopinion.org/emudhra-exits-global-ssl-tls-business-after-weak-key-incident/#story-in-brief

How this brief was made: an AI model read the reports linked above and wrote this summary and analysis, which were published automatically. Published briefs are sampled every hour by an automated quality check; the editor verifies its findings and approves corrections, and corrected briefs carry a dated correction line. Stance labels are editorial classifications of how each outlet framed this story, assigned by the same model, not ratings of the outlets. We do no original reporting. Methodology: https://indianopinion.org/ai-use-policy/