eMudhra Exits SSL Business, 1% of Global Revenue Affected

eMudhra’s board voted to exit the SSL/TLS certificate segment after Google, Apple, Firefox and Edge moved to distrust eight of its certificates on Oct 20— a move that could shave about 1% off its top line. The company’s stock, trading under EMUDHRA on NSE, has yet to show a clear price reaction, but analysts note the impact on earnings will likely be marginal.

The 1% figure comes from V. Srinivasan, chairman, who said the business was already hit by rising data‑sovereignty mandates and the proliferation of free certificates like Let’s Encrypt. He added that revoking the affected certificate authorities within 14 hours of discovery prevented any data breach.

The incident surfaced on Oct 17 when researcher Wayne exposed that eight intermediate certificates issued by eMudhra had key spaces of only three to eight bits, a flaw that would let attackers generate spoofed certificates instantly. The company confirmed no end‑entity certificates had been issued and that its infrastructure stayed intact.

While the SSL/TLS arm will cease, eMudhra will keep its digital signature products—eSign, emCA, CertiNext, SecurePass and emAS—operational. The firm will also continue to support its G1 RSA root certificates and will provide replacement certificates to affected clients at no cost.

In the broader digital‑trust arena, the move underscores the pressure on traditional certificate authorities from low‑cost alternatives and stricter browser policies. Investors will be watching whether eMudhra’s core services can offset the revenue dip and how the company’s guidance for the next quarter is shaped by this divestment.