Disgraced eMudhra drops out of TLS business after using cert private key of 4

eMudhra, the Indian certificate authority caught issuing eight intermediate TLS certificates so weak that one had a private key of just '4' — letting anyone mint certificates for any website — is getting out of the TLS business. Chairman V. Srinivasan blamed rising compliance costs and thin returns, noting TLS was only 1% of revenue and free certificate providers had eroded margins. The exit matters because a distrusted CA leaving the ecosystem closes a major certificate-security incident, and shows how compliance failures can kill a CA business.

• Ars Technica2026-10-22 20:17
• LinuxDo2026-10-22 13:55