eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra's board confirmed it will exit the global SSL/TLS business after a researcher showed eight intermediate CA private keys were trivially recoverable, raising urgent questions about certificate trust for any organisation in the chain.
Summary written by editorial AI · Source link below
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates.
eMudhra said it will replace affected customers' certificates with free ones from partners, though its
Editorial Analysis
When a publicly trusted CA's key generation is this broken, every certificate in the chain is suspect — enterprises must verify exposure before adversaries exploit it.
Immediately audit all certificate stores, CT logs, and PKI configurations for eMudhra-issued certificates and initiate replacement with a vetted CA.
A trusted certificate authority had guessable private keys — verify your organisation holds no affected certificates.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at THN (Feedburner) in a new tab.
More from the Vulnerabilities Desk
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers1d
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software2d
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks3d
- HPE patches eight max severity RCE and auth bypass AOS flaws3d
- Compromised TLS Certificates3d