eMudhra Limited announced on October 22, 2026, that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business, according to the company’s press release.
Chairman V. Srinivasan indicated that the decision follows a recent incident involving the company’s global SSL/TLS certificate. According to the announcement, eMudhra handled the incident by revoking the affected certificate authorities within 14 hours of discovery and disclosing the matter promptly. The company stated that no end entity certificates were issued from the affected CA, its infrastructure was not compromised, and no data was breached, with all physical and logical security controls remaining intact.
eMudhra characterized global SSL/TLS as a small part of its business, contributing approximately 1% of global revenue. The company cited increasing data sovereignty and compliance requirements, as well as rising complexity and costs associated with the business. Additionally, eMudhra noted that large entities now issue SSL/TLS certificates free of cost, reducing business potential and return on investment.
According to the statement, the level of social media amplification around the recent incident brought disproportionate scrutiny relative to SSL/TLS’s significance in the company’s broader portfolio. The Board concluded that withdrawal was the right decision for eMudhra and its shareholders, allowing the company to sharpen focus on core enterprise solutions and other trust services.
eMudhra’s G1 RSA roots will continue serving customers until the transition is complete as the company works with browser programs and customers. The company will offer free certificate replacements from partners during the transition period. Revocation and certificate status services will remain operational until all issued certificates expire or are replaced. eMudhra committed to completing remaining obligations to browser root programs, including a full root-cause report.
The company emphasized that its other operations remain unaffected. According to the announcement, eMudhra’s Global digital signature certificate (DSC), eSign, signing services, enterprise PKI solutions (emCA and CertiNext platforms), emSigner eSignature Suite, and identity and authentication solutions (SecurePass and emAS) continue to operate normally.
Key facts
- eMudhra’s Board decided to voluntarily withdraw from the global SSL/TLS certificate business on October 22, 2026
- The company revoked affected certificate authorities within 14 hours of discovering a recent incident
- SSL/TLS contributed approximately 1% of eMudhra’s global revenue
- The company cited increasing compliance requirements, rising costs, and free offerings from competitors as factors
- Other business units including DSC, eSign, enterprise PKI solutions, and identity services remain unaffected