{
    "format": "anawords-story/1",
    "docs": "https://anawords.com/data",
    "url": "https://anawords.com/story/emudhra-weak-certificate-keys-exits-website-certificates-kpmg-review",
    "title": "eMudhra quits website certificates after weak keys surface; Microsoft and browsers block its certificates",
    "summary": "One of the private keys behind eMudhra certificates was the number 4. The Bengaluru firm has appointed KPMG to review the lapse, and Indian banks using its other roots are watching.",
    "section": "AI in India",
    "type": "incident",
    "published": "2026-11-02T21:49:47+05:30",
    "updated": "2026-11-02T21:49:47+05:30",
    "version": 1,
    "author": {
        "name": "Mayank Sahu",
        "url": "https://anawords.com/author/mayank-sahu"
    },
    "how_checked": "Sources checked by AI; published under the editor’s standing approval. Not read line by line by a person before publication.",
    "ai_assisted": true,
    "research_note": "https://anawords.com/research/emudhra-weak-certificate-keys-exits-website-certificates-kpmg-review",
    "labels": {
        "confirmed": {
            "name": "Confirmed",
            "meaning": "An official source says it: lab docs, pricing page, notice."
        },
        "reported": {
            "name": "Reported",
            "meaning": "Two or more independent, named outlets say it."
        },
        "claim": {
            "name": "Company claim",
            "meaning": "Only the company says it. Not checked by anyone else yet."
        },
        "unconfirmed": {
            "name": "Unconfirmed",
            "meaning": "One report only, shown with its source."
        },
        "unknown": {
            "name": "Not known",
            "meaning": "Not announced or not answered yet."
        }
    },
    "facts": [
        {
            "id": "f1",
            "text": "Private keys behind eight eMudhra certificates were numbers below 256; one was 4.",
            "label": "unconfirmed",
            "label_name": "Unconfirmed",
            "key_fact": true,
            "sources": [
                1
            ],
            "outcome": null
        },
        {
            "id": "f2",
            "text": "Microsoft removed seven eMudhra-linked certificates from Windows on 26 October and from Edge on 27 October.",
            "label": "reported",
            "label_name": "Reported",
            "key_fact": true,
            "sources": [
                1,
                2
            ],
            "outcome": null
        },
        {
            "id": "f3",
            "text": "Mozilla, Google, Apple and Microsoft blocked the compromised certificates.",
            "label": "unconfirmed",
            "label_name": "Unconfirmed",
            "key_fact": false,
            "sources": [
                1
            ],
            "outcome": null
        },
        {
            "id": "f4",
            "text": "eMudhra will exit its global website certificate business and has appointed KPMG for a review.",
            "label": "unconfirmed",
            "label_name": "Unconfirmed",
            "key_fact": true,
            "sources": [
                1
            ],
            "outcome": null
        },
        {
            "id": "f5",
            "text": "MeitY says domestic digital signature and eSign services are unaffected.",
            "label": "unconfirmed",
            "label_name": "Unconfirmed",
            "key_fact": false,
            "sources": [
                1
            ],
            "outcome": null
        },
        {
            "id": "f6",
            "text": "Any misuse of the weak keys.",
            "label": "unknown",
            "label_name": "Not known",
            "key_fact": false,
            "sources": [],
            "outcome": null
        }
    ],
    "sources": [
        {
            "n": 1,
            "url": "https://theprint.in/tech/emudhra-appoints-kpmg-to-review-compromised-certificate-keys-browser-makers-await-root-cause-report/3085892/",
            "title": "ThePrint: eMudhra appoints KPMG to review compromised certificate keys",
            "type": "outlet",
            "checked": "2 Nov 2026",
            "archive": {
                "url": "https://web.archive.org/web/20261102162038/https://theprint.in/tech/emudhra-appoints-kpmg-to-review-compromised-certificate-keys-browser-makers-await-root-cause-report/3085892/",
                "archived": "2026-11-02T21:50:38+05:30"
            },
            "original_gone": false
        },
        {
            "n": 2,
            "url": "https://www.pcworld.com/article/3270717/microsoft-pulls-7-emudhra-certificates-from-windows-heres-what-that-means.html",
            "title": "PCWorld: Microsoft pulls 7 eMudhra certificates from Windows. Here's what that means",
            "type": "outlet",
            "checked": "2 Nov 2026",
            "archive": {
                "url": "https://web.archive.org/web/20261102162512/https://www.pcworld.com/article/3270717/microsoft-pulls-7-emudhra-certificates-from-windows-heres-what-that-means.html",
                "archived": "2026-11-02T21:55:12+05:30"
            },
            "original_gone": false
        }
    ],
    "promises": [],
    "prices": [],
    "incidents": [
        {
            "company": "eMudhra",
            "product": "Website (TLS) certificates",
            "kind": "Security",
            "what": "Weak private keys found behind eight certificates; browsers and Microsoft blocked them and eMudhra is exiting the global website certificate business.",
            "started": null,
            "ended": null,
            "duration": null,
            "official_status_page": null,
            "source": "https://theprint.in/tech/emudhra-appoints-kpmg-to-review-compromised-certificate-keys-browser-makers-await-root-cause-report/3085892/",
            "label": "Reported",
            "story": null
        }
    ],
    "image": {
        "url": "https://anawords.com/uploads/2026/11/emudhra-weak-certificate-keys-exits-website-certificates-kpmg-review-16x9.webp",
        "kind": "illustration",
        "note": "Anawords illustration made by software from facts in the story. Not a photograph."
    },
    "changes": [
        {
            "version": 1,
            "date": "2026-11-02T21:49:47+05:30",
            "correction": false,
            "note": "First published. Research note published first. Sources checked by AI; approved for publication by the editor."
        }
    ],
    "license": {
        "facts_and_data": "Creative Commons Attribution 4.0 (CC BY 4.0)",
        "url": "https://creativecommons.org/licenses/by/4.0/",
        "article_text": "© Anawords. Quote with a link.",
        "attribution": "Anawords, https://anawords.com/story/emudhra-weak-certificate-keys-exits-website-certificates-kpmg-review"
    }
}