Executive Summary
eMudhra will exit its global SSL/TLS certificate business after the private keys of eight intermediate CA certificates were recovered. Organizations running AI agents or LLM applications should verify certificate dependencies and rotate potentially affected credentials.
What Happened
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after a researcher reported recovering the private keys of eight of its intermediate CA certificates. eMudhra said it will replace affected customers' certificates with free ones from partners, though its
Affected Products
- eMudhra global SSL/TLS certificate business
- eight eMudhra intermediate CA certificates
Vulnerability / Attack Technique
Guessable private key recovery
Technical Mechanism
A researcher reportedly recovered the private keys associated with eight intermediate CA certificates because the keys were easily guessable. The article summary does not provide further technical details about the key-generation weakness or exploitation process.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Certificate authorities and TLS certificates can form part of the infrastructure supply chain supporting AI agents and LLM applications. Teams should maintain an inventory of certificate dependencies and ensure that certificate replacement and credential rotation procedures cover AI services, agent tools, APIs, and deployment environments.
Recommended Controls
- Inventory SSL/TLS certificates, intermediate CAs, and certificate-authority dependencies across AI applications and agent infrastructure.
- Identify certificates issued by the affected eMudhra intermediate CAs and replace them according to the provider’s remediation guidance.
- Rotate associated private keys and update trust stores, service configurations, API gateways, and agent tool integrations where applicable.
- Monitor certificate transparency logs and certificate-expiry or revocation status for unexpected or replaced certificates.
- Include certificate-authority and cryptographic-key dependencies in AI-agent SBOMs and supply-chain risk reviews.
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/10/emudhra-to-exit-global-ssltls-business.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-23.