e Mudhra Limited (BSE: 543533 | NSE: EMUDHRA), a global digital trust company, announced on October 22, 2026 that its Board has voluntarily decided to withdraw from the global SSL/TLS certificate business. Chairman V. Srinivasan said the company handled a recent incident diligently, revoking affected CAs within 14 hours of discovery and disclosing promptly. No end entity certificates were issued from the affected CAs, its infrastructure was not compromised, and no data was breached.
Srinivasan said global SSL/TLS represents only about 1% of global revenue. Rising data sovereignty and compliance requirements, along with growing complexity and cost, have reduced the business's potential and return on investment. Many large entities also issue SSL/TLS certificates free of charge. He added that social media amplification of the incident brought scrutiny out of proportion to the line's place in the company's business.
The company says it will sharpen its focus on core enterprise solutions and trust services other than SSL/TLS. Its G1 RSA roots will continue serving customers until the transition is complete, and e Mudhra will work with browser programs and customers to enable it. Affected customers will be offered replacement certificates free of cost from partners. Revocation and certificate status services will keep running until every issued certificate has expired or been replaced, and the company will complete its commitments to browser root programs, including a full root-cause report.
The company stated that its global digital signature certificates, e Sign, enterprise PKI solutions, signing services, and identity and authentication products, including Secure Pass, are unaffected and continue to operate normally. e Mudhra says it serves banks, financial institutions, enterprises and governments in more than 35 countries.
Source: Hacker News · Summarized by HeadlinesBriefing