eMudhra exits global TLS after key flaw

This is a trust-anchor failure, not a conventional infrastructure breach: a key-generation flaw forced browser vendors to distrust eMudhra certificates and exposed the fragility of WebPKI operations.

• –Developers and operators using affected certificate chains must migrate to certificates from another trusted CA.
• –eMudhra says no end-entity certificates were issued from the affected intermediates and no customer data was breached.
• –The incident highlights why entropy validation, reproducible key ceremonies, certificate-transparency monitoring, and independent operational audits must complement hardware security modules.
• –The TLS business represented roughly 1% of revenue, limiting direct financial exposure but creating disproportionate reputational damage for a digital-trust provider.
• –Browser-level revocation protected many users quickly, but unmanaged clients and embedded systems remain a remediation concern.