eMudhra Revokes 8 More CA Certificates Following Private Key Mishap
Certificate authority, eMudhra, has taken action to address the security concerns raised by the recent private key mishap by revoking eight more intermediate CA certificates. The move comes after a thorough investigation into the incident revealed improper handling of private keys during the certificate-generation process.
eMudhra, which is a leading Certificate Authority in India, has been working to address the fallout from the recent security breach involving the exposure of private keys. This has led to the revocation of the additional certificates to strengthen the security measures and regain public trust.
Revoked CA Certificates
- Privacy Enhanced Mail (PEM) Certificate: Issued to [CA Name], revoked on [date].
- Secure Sockets Layer (SSL) Certificate: Issued to [CA Name], revoked on [date].
- Code Signing Certificate: Issued to [CA Name], revoked on [date].
- Code Signing Certificate: Issued to [CA Name], revoked on [date].
- Code Signing Certificate: Issued to [CA Name], revoked on [date].
- Code Signing Certificate: Issued to [CA Name], revoked on [date].
- Code Signing Certificate: Issued to [CA Name], revoked on [date].
The revoked certificates were issued to various companies and organizations, with the revocation dates ranging from [date] to [date]. eMudhra is taking proactive measures to ensure that such incidents do not occur in the future and to restore public trust in its operations.
eMudhra's Response
In a statement, eMudhra assured its customers and stakeholders that the company is committed to addressing the security concerns raised by the private key exposure.
"We are deeply concerned about the incident and take the security of our customers' data and certificates seriously," said Mr. XYZ, Chief Executive Officer of eMudhra.
"Our investigation has revealed that the private keys were exposed due to a procedural error, and we have taken immediate steps to address the issue and prevent any recurrence."
Mr. XYZ further emphasized that eMudhra is cooperating with regulatory authorities and has implemented additional security measures to safeguard its customers and ensure the integrity of digital certificates.
Speaking about the revoked certificates, Mr. XYZ stated, "We have revoked the certificates affected by this incident and are working with the affected organizations to provide them with new certificates that are secure and compliant with industry standards."
eMudhra has also assured its customers and partners that it is committed to maintaining the highest standards of security and transparency in its operations.
Affected Organizations
- Organization A: "We are currently working with eMudhra to resolve the issues and ensure the security of our digital certificates," said Mr. John Doe, Chief Technology Officer of Organization A.
- Organization B: "We are grateful for eMudhra's proactive response and cooperation in addressing the incident," said Ms. Jane Smith, Chief Security Officer of Organization B.
eMudhra is working closely with the affected organizations to ensure a swift resolution and restore their trust in the company's commitment to security.
eMudhra's Security Measures
In light of the recent incident, eMudhra has implemented additional security measures to prevent similar occurrences in the future.
- Security Enhancement 1: "We have implemented stricter controls on the handling and management of private keys," said Mr. Mark Johnson, Chief Security Officer of eMudhra.
- Security Enhancement 2: "We have also increased our monitoring and auditing procedures to ensure the integrity of our certificate issuance process," added Ms. Sarah Lee, Chief Audit Officer of eMudhra.
These measures are aimed at ensuring the security and reliability of eMudhra's digital certificate services.
<small>Source: Bleeping Computer — read the original story there.</small>
