eMudhra emSign PKI Services: Key Blocking Mechanism Fails to Validate Historical Public Key Reuse.

eMudhra Technologies Limited reported an incident regarding their key blocking mechanism, which failed to validate previously issued certificates for public keys that had been revoked due to key compromise. This issue was identified by the Google team and affected three certificates. eMudhra has since revoked the affected certificates and implemented enhanced controls to ensure that the key blocking mechanism applies retroactively to all certificates. They have also adopted automated systems to improve the handling of revocations. The case has been resolved with all action items completed and a commitment to maintaining compliance with industry standards.

1. 2024-09-20 eMudhra implemented a key blocking mechanism.
2. 2024-11-13 Google team reported the key blocking issue.
3. 2025-04-02 eMudhra requested closure of the incident.

1. 2024-11-16 Emudhra representative — Incident report detailing the key blocking mechanism failure.
2. 2025-02-12 Mozilla representative — Requested updates on remediation efforts.
3. 2025-03-31 Mozilla representative — Inquired about closure of the case.
4. 2025-04-02 Emudhra representative — Submitted closure summary and confirmed completion of all action items.