tech
eMudhra share price hits second straight 20% lower circuit; at 52-week low
MeitY has launched an investigation into eMudhra after eight intermediate Certificate Authority certificates were compromised.
Key points
- Eight intermediate Certificate Authority certificates issued by eMudhra were compromised due to flawed key-generation algorithms.
- Google, Apple, Microsoft, and Mozilla revoked the affected certificates to prevent impersonation attacks and traffic interception.
- MeitY has constituted a specialized investigation team to probe the security incident in eMudhra's Public Key Infrastructure.
Why it matters. The compromise of private keys allows malicious actors to issue unauthorized, spoofed SSL/TLS certificates for any website domain.
eMudhra's share price hit a 52-week low of ₹345.25 on the BSE after the Ministry of Electronics and Information Technology (MeitY) formed a special team to investigate a leak of private keys. A Business Standard report states the investigation concerns web security certificates issued by the company. This follows a Mozilla report and a CERT-In advisory regarding compromised private keys.
Latest updates
eMudhra share price hits second straight 20% lower circuit; at 52-week low
The Ministry of Electronics and Information Technology (MeitY) has formed a special team to investigate the leak of private keys associated with web security certificates issued by eMudhra. eMudhra share price movement Share price of eMudhra slumped 20 per cent for the second straight day, hitting a 52-week low at ₹345.25 on the BSE in Thursday’s intraday deals after the Ministry of Electronics and Information Technology (MeitY) formed a special team to investigate the leak of private keys associated with web security certificates issued by the company. In the past two trading days, the market price of eMudhra tanked 36 per cent amid reports of distrust of some of its intermediate Certificate Authorities (CAs) used in its global TLS business. The stock crashed below its previous low of ₹365.75 touched on March 30, 2026. At 02:56 PM, eMudhra quoted 19 per cent lower at ₹348.05 on the BSE, as compared to 0.66 per cent decline in the BSE Sensex. A combined 9.06 million shares changed hands on the NSE and BSE. Govt forms special team to investigate eMudhra digital certificate leak According to a Business Standard report, the Ministry of Electronics and Information Technology (MeitY) has formed a special team to investigate the leak of private keys associated with web security certificates issued by eMudhra. On Wednesday, the Indian Computer Emergency Response Team (CERT-In) i.
eMudhra share price hits 20 percent lower circuit after MeitY probe
Shares of eMudhra plummeted 20 percent to touch their 52-week low of ₹345.25 on the Bombay Stock Exchange during Thursday's intraday trade. The sharp sell-off follows the Ministry of Electronics and Information Technology (MeitY) setting up a special investigation team. The probe centers on the leak of private keys associated with web security certificates issued by the company. Market sentiment remains cautious as the regulatory and technical fallout from the certificate vulnerability continues to unfold.
CERT-In Advisory, MeitY Probe And Global Revocations: The eMudhra Security Story Explained
8 intermediate Certificate Authority (CA) certificates issued under eMudhra's global web-security banner were allegedly compromised due to cryptographic weaknesses in private keys The Ministry of Electronics and Information Technology (MeitY) has constituted a specialised investigation team following disclosures regarding a security incident in eMudhra’s Public Key Infrastructure (PKI). The development follows public revelations that eight intermediate Certificate Authority (CA) certificates issued under eMudhra’s global web-security banner were compromised due to cryptographic weaknesses in their private keys. While central authorities have assured that the operational impact on Indian applications and government portals remains minimal and short-lived, the incident has drawn global attention across cybersecurity and web infrastructure domains. Flawed Keys and Global Tech Restrictions The vulnerability, initially flagged by independent security researchers, exposed eight intermediate certificates containing private keys that lacked proper cryptographic randomness during generation. Flawed key-generation algorithms made the private keys mathematically easy to derive. In digital trust architectures, intermediate certificates authorise servers to establish encrypted connections; compromising their private keys allows malicious actors to issue unauthorised, spoofed SSL/TLS certifi.
CERT-In Advisory, MeitY Probe And Global Revocations: The eMudhra Security Story Explained
8 intermediate Certificate Authority (CA) certificates issued under eMudhra's global web-security banner were allegedly compromised due to cryptographic weaknesses in private keys The Ministry of Electronics and Information Technology (MeitY) has constituted a specialised investigation team following disclosures regarding a security incident in eMudhra’s Public Key Infrastructure (PKI). The development follows public revelations that eight intermediate Certificate Authority (CA) certificates issued under eMudhra’s global web-security banner were compromised due to cryptographic weaknesses in their private keys. While central authorities have assured that the operational impact on Indian applications and government portals remains minimal and short-lived, the incident has drawn global attention across cybersecurity and web infrastructure domains. Flawed Keys and Global Tech Restrictions The vulnerability, initially flagged by independent security researchers, exposed eight intermediate certificates containing private keys that lacked proper cryptographic randomness during generation. Flawed key-generation algorithms made the private keys mathematically easy to derive. In digital trust architectures, intermediate certificates authorise servers to establish encrypted connections; compromising their private keys allows malicious actors to issue unauthorised, spoofed SSL/TLS certifi.
MeitY And CERT-In Probe Security Vulnerabilities In eMudhra Certificate Authority Infrastructure
The Ministry of Electronics and Information Technology has constituted a specialised investigation team following public disclosures regarding a security incident in eMudhra's Public Key Infrastructure. The probe comes after CERT-In issued advisories over the alleged compromise of eight intermediate Certificate Authority certificates issued under eMudhra's global web-security banner. These certificates were reportedly affected due to cryptographic weaknesses identified in underlying private keys. Regulatory authorities and global security agencies are coordinating revocations and audits to secure digital trust infrastructure and prevent potential interception or fraudulent certificate generation.
eMudhra shares plunge 20% amid certificate authority distrust reports
Shares of eMudhra plummeted 20% to ₹431.55 on the BSE during Wednesday's trade. The sell-off was triggered by reports indicating distrust in some of the company's intermediate Certificate Authorities (CAs). These CAs are integral to the company's global Transport Layer Security (TLS) business. eMudhra provides digital identity and security solutions globally, and the reports have raised concerns over its trust infrastructure.
eMudhra shares hit 20% lower circuit at ₹431.55 on certificate authority distrust
Shares of eMudhra were locked at a 20% lower circuit at ₹431.55 on the BSE in Wednesday's intraday deals. The sharp decline came amid reports of distrust of some of the company's intermediate Certificate Authorities used in its global TLS business. eMudhra is a global provider of digital identity, trust, and security solutions. The stock has been in focus as investors assess the potential impact on its operations and client trust.
Eight eMudhra certificate authority keys compromised, browsers block them
The private keys associated with eight digital security certificates issued by eMudhra, an Indian digital trust company, have been compromised. The weakly generated keys could allow attackers to create fake website certificates and impersonate legitimate websites, potentially enabling them to intercept or alter communications. Major browser and software providers, including Chrome, Firefox, Apple and Microsoft, have moved to block the affected certificates. The compromise was reported on October 21, 2026. Security experts advise system administrators to check for and revoke any affected certificates in their environments.
eMudhra Certificate Authority Keys 'Hacked': 8 Certificates Blocked By Chrome, Firefox, Apple And Microsoft- All Details Explained
Eight eMudhra CA keys were compromised. Chrome, Firefox, Apple and Microsoft blocked them. Here is what happened, the risks and how to secure systems. Private keys for eight intermediate certificates run by Indian certificate authority eMudhra have been compromised. Browsers, operating systems and software makers have moved to block them. eMudhra has revoked all eight. The report reached Mozilla on Saturday, 17 October 2026, at 20:06 UTC. It came from a researcher named Wayne. Mozilla and Google’s Chrome Root Program confirmed the compromise on 20 October. The certificates could have let an attacker forge HTTPS certificates for any website. The block came within hours in Chrome and Firefox. No forged certificate has been found so far. Many other tools need a manual update to be safe. What Happened? Question Answer Who is affected eMudhra, an Indian certificate authority that sells under the emSign brand What was compromised Private keys of eight intermediate CA certificates Split Six for TLS (HTTPS) and two for code signing When reported 17 October 2026, 20:06 UTC Revoked by eMudhra 18 October 2026 (reason: CA compromise) Forged certificates found None so far in Chrome’s Certificate Transparency (CT) log search How the keys leaked Not yet known Official eMudhra statement Published 20 October 2026; investigation ongoing What is a Certificate Authority, and why does this matter E.