Key Announcement

eMudhra Limited announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business. The decision was made after detailed deliberations by the Board.

Context and Rationale

The decision follows a recent incident relating to the company's global SSL/TLS certificate business. According to Chairman V. Srinivasan, eMudhra handled the recent incident diligently by:

  • Revoking the affected Certificate Authorities (CAs) within 14 hours of discovery
  • Making prompt disclosures
  • Confirming that no end entity certificates were issued from the affected CAs
  • Maintaining that infrastructure was not compromised and no data was breached
  • Ensuring all physical and logical security controls remained intact

Business Impact Analysis

The global SSL/TLS certificate business represents approximately 1% of the company's global revenue. The Board cited several factors influencing the decision:

  • Increasing data sovereignty and compliance requirements
  • Growing complexity and cost associated with this business line
  • Reduced business potential and Return on Investment (RoI) due to free SSL/TLS offerings from large entities
  • Disproportionate social media amplification and scrutiny relative to the business segment's size

Transition Plan

eMudhra outlined a comprehensive transition plan for customers:

  • G1 RSA roots will continue to serve customers during the transition period
  • Company will work with browser programs and customers to enable smooth transition
  • Affected customers will receive free certificate replacements from partners
  • Revocation and certificate status services will continue until all issued certificates have expired or been replaced
  • Company will complete remaining commitments to browser root programs, including submitting a full root cause report

Unaffected Business Operations

The company clarified that its global SSL/TLS infrastructure runs separately from other operations. The following core businesses remain unaffected and continue normal operations:

  • Global digital signature certificate (DSC) services
  • eSign and other signing services (including India operations)
  • Enterprise PKI Solutions (emCA, CertiNext platforms)
  • emSigner eSignature Suite
  • Identity and authentication solutions (SecurePass, emAS)

Strategic Focus

The company will sharpen focus on core enterprise solutions and trust services other than SSL/TLS, putting energy where it creates the most value for customers.

Company Background

eMudhra is a global provider of digital identity, trust, and security solutions with over 17 years of expertise, serving banks and financial institutions (BFSI), enterprises, and governments across more than 35 countries worldwide.