{"id":3711,"date":"2026-10-22T18:18:32","date_gmt":"2026-10-22T18:18:32","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3711"},"modified":"2026-10-22T18:18:32","modified_gmt":"2026-10-22T18:18:32","slug":"emudhra-to-exit-global-ssl-tls-business-after-8-intermediate-ca-keys-found-easily-guessable","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3711","title":{"rendered":"eMudhra to Exit Global SSL\/TLS Business After 8 Intermediate CA Keys Found Easily Guessable"},"content":{"rendered":"
\n
<\/a><\/div>\n

eMudhra<\/strong>, an Indian certificate authority (CA), will withdraw from its global SSL\/TLS certificate business, its board decided on Thursday<\/a>. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates.<\/p>\n

eMudhra said it will replace affected customers’ certificates with free ones from partners, though its announcement did not name the partners or provide a date for the exit.<\/p>\n

Six of those eight were for website (TLS) certificates. Chrome will stop trusting the eMudhra root certificate above them, emSign ECC Root CA – G3. The change is expected to reach users on the morning of October 27, Pacific time.<\/p>\n

On October 20, Mozilla decided to stop trusting the same root in Firefox. Removing a root from a browser also cuts off legitimate certificates issued beneath it.<\/p>\n

About 30,800 unexpired certificates chained to that root as of October 21, by Chrome’s count<\/a> of public Certificate Transparency (CT) logs. Of those, 99.9% were issued through InCommon, the certificate service Internet2 created for the higher education community. InCommon moved the service onto eMudhra’s CertiNext platform<\/a> between April and July this year.<\/p>\n

Google has told website operators<\/a> with certificates under that root that they \u00abmust immediately acquire and install a new TLS certificate from another PKI hierarchy included in the Chrome Root Store.\u00bb<\/p>\n

Until the transition is complete, eMudhra said, its G1 RSA root certificates will continue to serve customers. G1 is a separate hierarchy from the ECC root, but Chrome is still deciding whether to keep eMudhra’s remaining CA certificates in its root store.<\/p>\n

eMudhra will keep its revocation and status services running until every SSL\/TLS certificate it issued has expired or been replaced. Its other businesses, including digital signature certificates, eSign and the CertiNext platform InCommon uses, will continue.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

The announcement does not mention InCommon, or say whether eMudhra will keep issuing new certificates under G1 until it exits.<\/p>\n

<\/p>\n

eMudhra said the global SSL\/TLS business brings in about 1% of its revenue. Data sovereignty and compliance rules make it more complex and costly to run, and some large providers give the certificates away free.<\/p>\n

The incident’s spread on social media has also brought \u00abscrutiny that is out of proportion to SSL\/TLS\u2019s place in our business,\u00bb the company said.<\/p>\n

The researcher reported the weak keys to Apple, Google, Microsoft, Mozilla and eMudhra on October 17. Each private key should have been a huge random number, but all eight were below 256, so anyone could work them out almost instantly.<\/p>\n

Chrome and Firefox blocked the six TLS intermediates within hours. No website certificate from them had appeared in CT logs before Chrome’s block, so none could have been used against Chrome or other software that requires CT logging, Google said.<\/p>\n

eMudhra said it never used the eight to issue certificates to websites or users, and that its systems were not breached.<\/p>\n

What Certificate Holders Can Do<\/h3>\n

Cornell has told its certificate holders<\/a> to request RSA certificates instead of ECC ones, because \u00abRSA certificates use eMudhra’s unaffected root and should work.\u00bb The university counts more than 300 affected certificates of its own.<\/p>\n

The University of Michigan says<\/a> InCommon’s RSA certificates are not currently affected, but that their root \u00abcould become distrusted, too.\u00bb For now, its main alternative is Let’s Encrypt.<\/p>\n

eMudhra has estimated<\/a> that about 30,000 certificates need to be moved, and that about 97% of them were issued using ACME, the protocol many servers use to request and renew certificates automatically.<\/p>\n

Chrome has told eMudhra that standard ACME clients do not replace certificates outside their renewal window unless they support ACME Renewal Information (ARI) or someone steps in by hand. Moving from the ECC hierarchy to the RSA one may also need changes to client settings.<\/p>\n

Questions Over eMudhra’s RSA Root<\/h3>\n

Mozilla said on October 20<\/a> that, for now, it was not removing trust in the G1 root, emSign Root CA – G1. At Stanford<\/a>, InCommon certificates chain to that root through an eMudhra CA called emSign Root TLS CA – G1.<\/p>\n

On October 14, eMudhra published a certificate revocation list (CRL) for emSign Root TLS CA – G1. A CRL is the signed list of certificates a CA has revoked. This one’s signature does not verify against that CA’s own key, the researcher who reported the weak keys said in Mozilla’s public bug report<\/a> on the incident.<\/p>\n

A participant in the same bug report said on October 22<\/a> that the list appears to have been signed with the key of an eMudhra OCSP certificate. OCSP certificates sign answers about whether a certificate has been revoked. The participant wrote that the match \u00abappears to be a case of using the wrong signing key, rather than evidence of another weak key.\u00bb<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

Chrome raised the list on October 21, in one of 12 questions it posted to the bug report. It asked which key signed it, and whether eMudhra holds more than one key pair for that CA or for any of its roots.<\/p>\n

Chrome also asked whether customers are moving to G1, to another company’s CA, or both, and when all of them will have moved, given its planned October 27 removal. eMudhra said on October 20 that G1 was \u00abthe only alternative available,\u00bb and the next day<\/a> that it is issuing its affected US customers fresh certificates \u00abfrom an alternate, independently operated, publicly trusted CA hierarchy.\u00bb<\/p>\n

In 2025, eMudhra published invalid CRLs for six of the same intermediates. Its incident report at the time<\/a> said it fixed them by \u00abregenerating the CRLs using the appropriate private key associated with each Intermediate CA.\u00bb<\/p>\n

On October 19, eMudhra told Mozilla<\/a> that those lists were first signed with the keys it meant to use. When that produced invalid signatures, they were \u00abresigned with flawed keys,\u00bb the weak keys found this month.<\/p>\n

Chrome said that disclosure \u00abraises serious concerns regarding eMudhra’s transparency and incident handling\u00bb during and after the 2025 incident. It asked why the 2025 report did not mention that two key pairs existed for each of those CAs.<\/p>\n

As of 13:31 UTC on Thursday, eMudhra had not answered any of Chrome’s questions publicly on the bug report. Its last visible comment there was posted on October 20.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL\/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the…<\/p>\n","protected":false},"author":1,"featured_media":3712,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[30,3904,3863,3612,597,3905,3903,144,3902],"class_list":["post-3711","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-business","tag-easily","tag-emudhra","tag-exit","tag-global","tag-guessable","tag-intermediate","tag-keys","tag-ssltls"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3711"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3711\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3712"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}