Desk note · industry · Digital trust / compliance
On 22 October 2026, eMudhra Ltd said its board will voluntarily withdraw from the global SSL/TLS certificate segment after a key-security incident on eight intermediate certificates, citing compliance cost and weak economics while stressing that other digital-trust services continue.
On 22 October 2026, eMudhra Ltd told exchanges that its board approved a voluntary withdrawal from the global SSL/TLS website certificate business. The decision follows a security incident in which private keys tied to eight intermediate certificates were not adequately protected, prompting emergency blocks from major browser developers after Mozilla published technical details. eMudhra said compliance costs, operational complexity, and shrinking economics in that product line drove the exit call, while other digital-trust offerings in India would keep running. The move comes days after the same company’s shares sold off when the browser distrust list first appeared. Customers use eMudhra for digital signatures, GST workflows, and corporate filings even when they never buy a public TLS cert.
Certificate authorities compete on price for commodity TLS products while carrying heavy audit and insurance overhead. One key-management failure can erase years of margin. Exiting the global SSL segment lets management shrink the attack surface and focus on domestic signature and identity products where regulation creates stickier demand. Enterprises that bought TLS certs from eMudhra must migrate to another authority before renewals expire, which IT teams often treat as a standard playbook after distrust events. The announcement does not by itself replace browser blocks; customers still need fresh certificate chains issued under a still-trusted root.
If your website or API still presents an eMudhra-issued TLS certificate in the global chain, schedule replacement with your hosting provider now. Compliance officers should confirm digital signature tokens and MCA filings use products outside the exited segment. Procurement teams may rebid trust vendors with stronger key-management attestations. Investors should model revenue mix without low-margin TLS renewals. Watch customer migration disclosures, any orders from India’s Controller of Certifying Authorities, and whether peers publish independent security audits after this episode.
Telecom / IPO
On 22 October 2026, exchange data showed Jio Platforms’ ₹30,213 crore issue had drawn about ₹3.73 lakh crore of total bids by late evening on Day 2, with the retail portion oversubscribed and market commentators citing diverted cash from other listed stocks during the book build.
SEBI / market infrastructure
On 22 October 2026, the Securities and Exchange Board of India proposed letting stock exchanges and depositories fund core-market and regulator-mandated initiatives without prior approval for each ticket, while keeping board oversight and financial safeguards and inviting comments until 12 November.
E-commerce / food delivery
On 22 October 2026, reporting said Flipkart is testing an internal food delivery product called Eat-in by Minutes with more than 8,000 employees in Bengaluru, using Ekart logistics as it prepares to compete with Zomato and Swiggy in meal delivery.
Trade policy / exports
Commerce minister Piyush Goyal said on 22 October 2026 that India’s proposed free-trade agreement with the European Union could become operational within four to five months after signing, with the deal expected to be inked before year-end during his visit to Germany.
For informational purposes only. Not investment advice. Verify with filings and a licensed adviser.