eMudhra Exits Global Website Security Business
eMudhra Limited announced it will leave the global website security certificate business. This decision follows a key-generation flaw that affected eight intermediate certification authority (CA) certificates. The company made this announcement on October 21, 2026. It confirmed that its Indian digital signature and eSign services will continue to operate normally.
eMudhra's stock has faced significant pressure, dropping 34% over three trading sessions. On October 22, the stock fell 15% during intraday trading. It reached an intraday low of ₹367, close to its 52-week low of ₹365.75, recorded on March 30. Analysts link the selloff to concerns over the compromised certificates, which were reported by the Indian Computer Emergency Response Team (CERT-In).
In its exchange filing, eMudhra explained that a flaw in its key generation component caused weak keys to be published to browser root stores. The company stated that its infrastructure was not compromised and that there was no data breach. eMudhra emphasized that the global TLS business, affected by this incident, represents only about 1% of its total revenue. Despite this, the company acknowledged potential reputational risks from the situation.
The firm is working to identify the root cause of the key-generation issue. It is also in direct communication with its customers regarding the matter. eMudhra reassured stakeholders that its Indian operations remain unaffected by this incident, as they are based on separate infrastructure.
eMudhra's stock decline could impact investor sentiment in the cybersecurity sector. This is especially true for companies involved in digital certificates and online security. The incident may lead to increased scrutiny of security practices across the industry. Investors will watch for updates on the investigation into the key-generation flaw and any potential regulatory responses from CERT-In.
Based on reporting by: moneycontrol.com, livemint.com