eMudhra’s Abrupt Exit from the Global SSL/TLS Certificate Market

A Sudden Strategic Withdrawal

On Thursday, 22 October 2026, eMudhra Limited announced that it would voluntarily withdraw from the global SSL/TLS certificate business following the disclosure of a key‑generation flaw affecting eight of its intermediate certificates. The decision was made after a security researcher revealed that the private keys associated with these certificates were so weak that they could be compromised in minutes by a skilled adversary. The breach was not limited to a single product; it spanned the company’s entire web‑authentication certificate portfolio.

Market Repercussion

The announcement triggered an immediate and severe sell‑off. By mid‑morning the stock had plummeted more than 20 % on consecutive trading days, with the share price falling to ₹345.25, a new 52‑week low. Within 24 hours, the price had dropped an additional 15 %, culminating in a 35 % decline over two days. The National Stock Exchange recorded a volume of over 4 million shares traded on 22 October, reflecting investor panic and a loss of confidence in the company’s security posture.

Regulatory Response

The Ministry of Electronics and Information Technology (MeitY) promptly ordered a probe into the incident. A special investigative team was formed to assess the extent of the breach, evaluate the adequacy of eMudhra’s key‑management practices, and determine whether the company complied with India’s Digital Signature Act and the Information Technology (Information Security) Rules.

Industry Implications

Industry analysts have warned that this incident erodes trust in digital certificate authorities—an essential component of the global internet infrastructure. With eMudhra’s portfolio covering the North American, European, Middle Eastern, African, and Asia‑Pacific markets, the breach signals a systemic vulnerability that could affect multinational enterprises, retail banks, and private banking clients who rely on eMudhra’s services.

Financial Snapshot

  • Market Capitalisation: ₹35.4 billion
  • Price‑to‑Earnings Ratio: 39.54
  • Close Price (18 Oct 2026): ₹540
  • 52‑Week High (21 Sep 2026): ₹681.6
  • 52‑Week Low (29 Mar 2026): ₹364.55

The company’s valuation, already stretched by a high P/E ratio, has suffered an additional drag due to the loss of credibility and the potential costs associated with remediation, legal liabilities, and regulatory fines.

Conclusion

eMudhra’s decision to exit the global SSL/TLS certificate business is a stark reminder of how quickly a security lapse can translate into market erosion and regulatory scrutiny. The incident underscores the necessity for robust key‑generation algorithms, continuous vulnerability assessments, and transparent communication with stakeholders. Investors and clients now face the unsettling question: can eMudhra regain its footing, or will the company become a cautionary tale in the digital trust arena?