eMudhra Revokes Additional CA Certificates Following Security Incident

eMudhra announced on November 12, 2026, that eight more intermediate certificates from the Certificate Authority (CA) have been revoked. This action follows a security incident where improper handling of private keys during the certificate creation process was identified. The decision to revoke the certificates was made after a comprehensive internal investigation. The investigation revealed that eMudhra's security protocols were insufficient to ensure the integrity of the private keys.

This raised concerns regarding the trustworthiness of the affected certificates. eMudhra has since taken measures to enhance security standards and prevent future incidents. The revoked certificates are part of a larger group that has been affected for similar reasons in recent months. In total, eMudhra has now revoked 15 CA certificates to ensure the security of its infrastructure. The affected certificates were used in various applications and services, underscoring the urgency of the measures.

The security incidents at eMudhra have also impacted users who rely on these certificates. Companies using the affected certificates must now find alternative solutions to secure their systems. eMudhra has offered support to affected customers to facilitate the transition to new certificates. The CA has announced plans to revise its security policies and implement additional training for employees to ensure that such incidents are avoided in the future. These measures aim to restore trust in eMudhra's certificates and elevate the security standards across the industry.

The incidents have also attracted the attention of regulatory authorities, who are scrutinizing the practices of CAs more closely. Experts warn that such security issues could undermine trust in digital certificates and the entire internet security infrastructure. The industry is under pressure to raise security standards and communicate transparently about incidents. eMudhra has committed to publicly sharing the findings of the investigation and the measures taken. This is intended not only to strengthen customer trust but also to serve as an example for other CAs facing similar challenges.

The CA plans to provide regular updates in the coming months regarding the progress of implementing the new security policies. The security gap that led to the revocations has also sparked discussions about the need for stronger encryption standards and better key management practices. Experts are calling for industry-wide collaboration to improve the security landscape and minimize the risk of similar incidents in the future. Developments in this area will continue to be closely monitored. The revocation announcement was published in November 2026, and the CA plans to inform affected customers about the next steps by the end of the month.