eMudhra Abandons Global SSL/TLS Certificate Business After Weak-Key Disaster
Indian digital trust provider eMudhra is walking away from the global SSL/TLS certificate market entirely, weeks after researchers showed that eight of its intermediate CA certificates were signed...
GoDaddy Forces Mass TLS Certificate Reset After Compliance Lapse Hits 400,000+ Sites
GoDaddy has revoked more than 404,000 SSL/TLS certificates issued under its GoDaddy and Starfield chains after discovering the certificates did not match its published certificate policies, then missed...
Compromised eMudhra CA Keys Force Emergency Trust-Store Updates
Eight eMudhra intermediate certificate-authority keys were shown to be compromised, triggering emergency blocks across browsers and software ecosystems. Browsers update quickly, but applications with bundled or stale trust...
AWS Sets a Multi-Year Countdown to Kill Off Email-Based Certificate Validation
Amazon is phasing out email validation for public TLS certificates issued through AWS Certificate Manager, with new-Region restrictions starting in 2027 and a full industry-wide browser distrust deadline...
Let’s Encrypt Halts All Certificate Issuance After Cross-Signed Root Certificate Incident
Let's Encrypt temporarily suspended all certificate issuance on May 8, 2026, after engineers identified a critical issue with a cross-signed certificate linking its Generation X root to its...
Microsoft Defender False Positive Quarantines DigiCert Root Certificates, Risks Breaking SSL Across Enterprise Networks
A faulty Microsoft Defender antimalware definition update incorrectly flagged two legitimate DigiCert root certificates as malware, automatically quarantining them from the Windows trust store on enterprise endpoints. The...