eMudhra exits website security business after weak-key TLS flaw; browsers block certificates; CERT-In warns

Eight eMudhra TLS certificates had private keys of only 3 to 8 bits. Mozilla, Google, Apple and Microsoft blocked the compromised CA certificates; CERT-In warned the weak keys could let attackers impersonate websites. eMudhra is exiting the website security business entirely, attributing the flaw to a 2025 key generation ceremony, and estimates about 30,000 certificates need migration as Google prepares a wider trust change on 27 October 2026.

Detected & updated continuously · Source: Nebula