Disgraced eMudhra drops out of TLS business after using cert private key of 4
Summary
Ars Technica reports that eMudhra is exiting the global SSL/TLS certificate business after researchers found eight compromised certificates with extremely weak private keys, including some as small as 4 bits. The company cites rising compliance costs and competition from free TLS providers, while noting a flawed key-generation ceremony as the root cause and browser vendors blocking the compromised certificates.