eMudhra to Exit Global SSL/TLS Certificate Business Following Security Incident
NEW DELHI — Indian digital trust solutions provider eMudhra announced Thursday that it will withdraw from the global SSL/TLS certificate business following a recent security incident, citing rising regulatory requirements, operational costs and reputational risks associated with the segment.
The company’s board approved the decision after determining that the business, which contributes approximately 1% of eMudhra’s global revenue, no longer justified the resources required to maintain its operations.
“eMudhra Limited, a global digital trust company, today announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business,” the company said in an official statement.
The announcement follows a security-related incident involving eMudhra’s global SSL/TLS certificate infrastructure that attracted scrutiny of the company’s certificate management operations.
According to eMudhra, the incident was addressed promptly, with the affected certificate authorities revoked within 14 hours of discovery.
The company said it also disclosed the issue to relevant stakeholders.
Chairman V. Srinivasan maintained that eMudhra responded appropriately and that the incident did not result in unauthorized certificate issuance or a breach of customer information.
“There were no end entity certificates issued out of the affected CA’s. Its infrastructure was not compromised, no data was breached All physical and logical security controls remained intact,” the company said.
eMudhra emphasized that its underlying infrastructure had not been compromised and that physical and digital security measures remained operational throughout the incident.
Despite those assurances, the company acknowledged that the incident generated considerable attention relative to the limited financial contribution of its SSL/TLS certificate operations.
SSL/TLS certificates are used to establish encrypted connections between websites and users, helping protect information transmitted over the internet and verify the identities of websites.
Organizations issuing these certificates must meet security and compliance requirements designed to maintain trust in the global internet ecosystem.
eMudhra said operating in the sector had become increasingly complex because of evolving compliance standards, data sovereignty regulations and infrastructure expenses.
The company also cited the growing management demands associated with maintaining certificate authority operations across multiple jurisdictions.
Srinivasan said the board weighed those challenges against the segment’s relatively small contribution to overall revenue before deciding to discontinue the business.
The company concluded that withdrawing from global SSL/TLS certificate issuance would serve the long-term interests of shareholders and allow management to concentrate on areas with stronger growth potential.
The decision marks a strategic shift for eMudhra as it reassesses its participation in the global digital certificate market.
While SSL/TLS certificates remain essential to secure online communications, eMudhra said the operational and regulatory demands of the business had become disproportionate to its financial significance within the company.
The company did not provide a specific timeline for completing its withdrawal or details about any transition arrangements for existing customers.
eMudhra said its decision was intended to sharpen its focus on strategic growth opportunities while reducing the complexity and compliance obligations associated with its global SSL/TLS certificate business. (Source: IANS)
