GoKawiileMudhra quits global SSL/TLS certificate business after key compromise
eMudhra is exiting the global SSL/TLS certificate market after private keys behind eight of its intermediate certificate authorities were compromised. The company will offer affected customers free Sectigo-issued replacement certificates and will keep revocation and status services running until all its certificates have expired or been replaced. eMudhra cited rising data sovereignty and compliance costs as additional factors in leaving the business.
GoKawiil's interpretation of the reporting above, not reported fact.
Security experts quoted in the report warn that simply swapping certificates may not resolve deeper trust and governance concerns, especially if the replacement root is managed by the same vendor. IDC's Sakshi Grover suggests many organizations have limited visibility into where certificate trust decisions are made outside browsers, such as in Java keystores, containers, VPNs, and embedded devices, meaning the migration could expose hidden dependencies. This episode could prompt enterprises to reassess how deeply they understand their own PKI trust chains.
- eMudhra is leaving the SSL/TLS certificate business after a key compromise affecting eight intermediate CAs.
- Customers will get free Sectigo-issued replacement certificates, with revocation services maintained during transition.
- Analysts caution that certificate replacement alone may not reveal or fix broader hidden trust dependencies in enterprise systems.
YubiKey 5 NFC Security Key — With PKI trust chains and certificate authorities under scrutiny, it's a good time to strengthen your own authentication posture. The YubiKey 5 NFC supports hardware-backed public key cryptography for logins, reducing reliance on fragile certificate-based trust alone. It's a practical way for IT teams and individuals to harden access control amid growing PKI uncertainty.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: it.slashdot.org — Posted, 2026-10-25
Published there as: “As eMudhra Exits Cert Business, Users Face New PKI Trust Decisions”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.