A developer crafted a 'protest certificate' for maurycyz.com by choosing a private key whose resulting public key bytes spell out a readable ASCII message criticizing the SSL/TLS certificate system, then had it issued normally through Let's Encrypt. The post notes certificate authorities never verify that a submitted public key was generated from truly random data, citing a prior case where a CA issued a certificate using the trivial private key value '4'.
maurycyz.com
· 2026-11-10
eMudhra is exiting the global SSL/TLS certificate market after private keys behind eight of its intermediate certificate authorities were compromised. The company will offer affected customers free Sectigo-issued replacement certificates and will keep revocation and status services running until all its certificates have expired or been replaced. eMudhra cited rising data sovereignty and compliance costs as additional factors in leaving the business.
it.slashdot.org
· 2026-10-25
eMudhra Limited's Board has decided to voluntarily withdraw from the global SSL/TLS certificate business, the company announced. Chairman V. Srinivasan said the segment contributes about 1% of global revenue and cited rising data sovereignty and compliance costs, reduced returns, and competition from free certificates. The company said it will continue to serve existing customers via its G1 RSA roots during the transition.
emudhra.com
· 2026-10-22
eMudhra announced it will withdraw from the global SSL/TLS certificate business, as stated in a press release filed with the BSE. The company said it will instead concentrate on its core enterprise solutions and other trust services besides SSL/TLS.
news.ycombinator.com
· 2026-10-22
Let's Encrypt will cut the default lifespan of its free SSL/TLS certificates from 90 to 64 days starting February 10, 2027, with a testing phase opening October 14, 2026 for admins to trial the change. The certificate authority also plans a further reduction to 45-day defaults in 2028.
arstechnica.com
· 2026-10-08
GoKawiil