eMudhra Says A Buggy Python Script Truncated Its CA Private Keys, Leading To Last Month’s Global Certificate Trust Crisis

India's largest certificate authority, eMudhra, has published an incident report revealing that a buggy custom Python script truncated private keys and led to a global certificate trust crisis. The flaw produced cryptographically weak ECDSA private keys and raised compliance concerns for several RSA keys, prompting browsers to revoke trust and wiping out significant market value. Consequently, eMudhra has decided to exit the public TLS certificate business entirely by November 2026. Open article →