eMudhra to Exit Global SSL/TLS Certificate Business

eMudhra announced it will withdraw from the global SSL/TLS certificate business, citing a recent incident involving a global SSL/TLS certificate that was revoked within 14 hours of discovery. The company states no end-entity certificates were issued, its infrastructure and data remained secure, and all security controls held. Management argues SSL/TLS represents only about 1% of global revenue while regulatory complexity, data sovereignty demands, and rising costs have eroded returns - especially as some large players provide SSL/TLS free. Intense social media scrutiny around the incident, disproportionate to the business’s scale within the company, tipped the board toward exiting to refocus resources on higher-value enterprise trust and identity solutions.

Customers will be supported through a managed transition: existing G1 RSA roots remain active until replacement, eMudhra will coordinate with browser programs and offer certificate replacements free via partners, and revocation/status services will continue until every certificate is expired or replaced. The company commits to completing browser root program obligations and delivering a full root-cause report. Core offerings - digital signature certificates (DSC), eSign, enterprise PKI (emCA, CertiNext), emSigner, SecurePass and emAS - operate separately and will remain unaffected as eMudhra shifts focus to its broader digital identity and trust services across banking, enterprise and government markets.