# Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Google, Mozilla, Apple, the Go project and other major technology firms have moved to block certificates issued by Indian certificate authority eMudhra after the discovery of eight compromised keys.
The coordinated action came after eMudhra identified that private keys had been compromised, prompting the firms to revoke the affected certificates from their systems. eMudhra operates as a certificate authority trusted by browsers and platforms to issue digital certificates used for securing web connections and verifying identities online.
The exact mechanism by which the private keys were compromised remains unclear. According to reporting, the root cause of the key compromise has not been publicly disclosed, leaving open questions about whether the breach resulted from an internal vulnerability, insider access, external attack, or other methods.
The swift response from multiple technology giants underscores the interconnected nature of internet security infrastructure. When a certificate authority's private keys are exposed, attackers can use those keys to forge certificates that appear legitimate to browsers and applications, potentially enabling man-in-the-middle attacks or credential spoofing. By blocking the affected certificates, the companies prevented malicious use of the compromised keys.
eMudhra, based in India, holds trusted certificate authority status in major browsers, meaning its certificates are accepted by default in Chrome, Firefox, Safari and other applications. The compromise affected certificates tied to those eight specific keys. The company has not publicly detailed the scope of certificates issued using the compromised keys or the timeframe during which they remained active.
The action reflects a pattern of rapid response from the browser ecosystem when certificate authority security incidents surface. Similar incidents in recent years have prompted swift revocation and public disclosure to prevent exploitation windows.