eMudhra to exit global SSL/TLS certificate business
- ID
- 38678
- Status
- summarized
- Published
- 22 Oct 2026, 9:33 PM
- Fetched
- 23 Oct 2026, 4:59 PM
- Provider
- Hacker News
- Category
- dev-community
- Original URL
- https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business
- Source URL
- https://hnrss.org/best
Summary
- Score
- 7.0
- Created
- 23 Oct 2026, 5:00 PM
- Tags
- Audience
- developerssaas_founders
What happened
eMudhra's board decided to voluntarily withdraw from the global SSL/TLS certificate business after an incident; it says affected CAs were revoked within 14 hours, no end-entity certificates were issued from the affected CA, and its infrastructure was not compromised. Global SSL/TLS is about 1% of eMudhra's global revenue, and the company cites rising data-sovereignty/compliance complexity and cost plus free SSL/TLS from large entities. eMudhra says G1 RSA roots will continue through transition, affected customers can get free replacement certificates via partners, revocation/status services will run until certificates expire or are replaced, and it will file a full root-cause report.
Why it matters
If you or a client holds an eMudhra-issued global SSL/TLS certificate, start discovery now: eMudhra says replacements will be free via partners, but you still need to find certs chaining to its G1 RSA roots and schedule cutover before expiry. If you do not use eMudhra certs, this is a CA vendor-risk signal rather than an immediate code change.
Discussion angle
Who in the room actually has certificates chaining to eMudhra G1 RSA roots, and who owns the discovery-and-replacement runbook before expiry?