A number of Indian government websites have continued to use digital security certificates that were revoked more than 8 days ago by eMudhra, a licensed Indian Certifying Authority. These certificates were revoked after eMudhra identified that they had been issued without certain certificate policy identifiers required under its own certification policies. Despite the revocation, several government websites continued to serve these certificates. The issue is particularly concerning because the affected websites include public-facing government services, judicial institutions, regulatory bodies and other important public infrastructure.
SFLC.in has written to the Ministry of Electronics and Information Technology (MeitY), the Indian Computer Emergency Response Team (CERT-In), and eMudhra, seeking accountability and urgent corrective action.
We have also compiled a dataset identifying government domains that continue to serve revoked certificates, which is being published alongside this blog. The purpose of publishing this information is to make the scale of the issue more transparent and to help identify the government websites that require immediate remediation.
Government Websites Reporting eMudhra Certificate Errors
Dataset of 89 website checks recorded between 2026-03-31 and 2026-10-16. The browser reported certificate revocation or expiration errors for the listed sites.
Showing 89 of 89 records
| Website / Service | Website URL | Reported status | Browser error code | Browser message | Recorded date | Certificate issuer (CN) | Issuer organisation |
|---|---|---|---|---|---|---|---|
| Project Assessment Infrastructure Monitoring and Analytics for Nation-Building (PAIMANA) | https://ipm.mospi.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-03-31 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Press Council of India (PCI) | https://presscouncil.nic.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-05-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Indian Public Health Standards (IPHS) | https://iphs.mohfw.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-06-13 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Railway Recruitment Board (RRB), Bangalore | https://www.rrbbnc.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-06-27 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Metallurgist Award Scheme | https://awards.steel.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-07-03 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Command Area Development & Water Management Information System (CADWM-IS) | https://cadwm.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-07-11 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| BCG Vaccine Laboratory, Chennai | https://dirbcglab.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-07-20 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Initiative for Developing and Harnessing Innovations (NIDHI) | https://nidhi.dst.gov.in | Expired | SEC_ERROR_EXPIRED_CERTIFICATE |
Peer’s Certificate has expired. | 2026-07-24 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Department of Food and Public Distribution (DFPD) | https://dfpd.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-05 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Indian Grain Storage Management and Research Institute (IGMRI) | https://igmri.dfpd.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-05 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Bharatiya Nabhikiya Vidyut Nigam Limited (BHAVINI) | https://bhavini.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-06 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Transmission Utility of India Ltd. (CTUIL) | https://ctuil.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-07 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Indian Institute of Integrative Medicine (IIIM) | https://iiim.res.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-07 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Institute of Food Technology Entrepreneurship and Management (NIFTEM), Kundli | https://niftem.ac.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-08 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| NEPA Limited | https://www.nepamills.co.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-10 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| MoPNG Pariyojana | https://pariyojana.mopng.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-11 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Centre for Next Generation Network | https://www.tec.gov.in/next-generation-network-ngn-2 | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-11 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Telecommunication Engineering Centre, New Delhi | https://www.tec.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-11 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Assessment Centre (NAC) | https://naccustoms.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-12 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Capital Region Planning Board | https://ncrpbprojects.mohua.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-12 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Institute of Plant Genome Research, New Delhi | https://nipgr.ac.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-13 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Unique Disability ID (UDID) | https://www.swavlambancard.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-13 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Council for Research in Homoeopathy (CCRH) | https://ccrhindia.ayush.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Online Indenting Recruitment Management System | https://oirms-ir.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Hindi Training Institute | https://chti.rajbhasha.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-17 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Jal Sanchay Jan Bhagidari | https://jsjb.mowr.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-17 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Water Resource Census Application | https://wrcensus.mowr.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-17 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Cluster Development Programme | https://cluster.dcmsme.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-18 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Fire Service College | https://nfscnagpur.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-18 | EM EV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Procurement and Marketing Support Scheme (PMS Portal) | https://pms.dcmsme.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-18 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Pashu Aushadhi Vikray Kendra | https://pashuaushadhi.dahd.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-22 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Ayushman Arogya Mandir | https://aam.mohfw.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-24 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| DST Direct Recruitment | https://recruitment.dst.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-25 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Food Corporation of India | https://fci.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-25 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Council for Vocational Education and Training (NCVET) | https://ncvet.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-25 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Good Laboratory Practice Compliance Monitoring Authority | https://ngcma.dst.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-25 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Integrated Pharmaceutical Database Management System 2.0 (IPDMS) | https://nppaipdms.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-08-31 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Services eHealth Assistance and Teleconsultation (SeHAT) | https://sehatopd.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-01 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Animal Welfare Board of India (AWBI) | https://awbi.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-03 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Atomic Energy Education Society (AEES) | https://www.aees.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-03 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Forest Survey of India (FSI) | https://fsi.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-04 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| NCERT Books | https://ncertbooks.ncert.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-04 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Crime Records Bureau | https://ncrb.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-05 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Raja Rammohun Roy Library Foundation (RRRLF) | https://rrrlf.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-05 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Board of Radiation and Isotope Technology (BRIT) | https://britatom.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-06 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Indian Statistical Institute (ISI), Calcutta | https://www.isical.ac.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-07 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Authorised Economic Operator Programme, Indian Customs (AEO) | https://aeoindia.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-08 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Press Sewa Portal | https://presssewa.prgi.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-08 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Vendor Registration Application | https://apovra.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-08 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Press Registrar General of India | https://prgi.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-09 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Food Grains Procurement Portal | https://cfpp.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-10 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Information Security Education and Awareness (ISEA) | https://www.isea.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-10 | EM EV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Qualifications Register | https://nqr.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-10 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Cold Chain and Vaccine Management Resource Centre (NCCVMRC) | https://nccmis.mohfw.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-12 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Centre for Materials for Electronics Technology (C-MET) | https://cmet.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Petroleum and Explosives Safety Organisation (PESO) | https://peso.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Bengaluru Customs Zone | https://bangalorecustoms.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-15 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Institute of Psychiatry (CIP) | https://cipranchi.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-15 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Indira Gandhi Rashtriya Uran Academy (IGRUA) | https://igrua.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-15 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Board of Research in Nuclear Sciences | https://brns.res.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-16 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| India Science, Technology and Innovation Portal (ISTI) | https://indiascienceandtechnology.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-16 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Scholarships Portal | https://scholarships.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-16 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Institute of Social Defence (NISD) | https://www.nisd.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-18 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Board of Practical Training (BOPT), Easter Region | https://bopter.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-21 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Monuments Authority (NMA) | https://nma.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-21 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Civil Defence Organisation | https://civildefence.indianrailways.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-22 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Stay Safe Online | https://staysafeonline.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-23 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Postage Stamps | https://postagestamps.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-25 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Silk Board | https://csb.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-26 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Council of Architecture | https://www.coa.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-26 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Northern Coalfields Limited | https://www.nclcil.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-26 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Canteen Stores Departments, Mumbai | https://afd.csdindia.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-28 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Mahanagar Telephone Nigam Limited (MTNL), Mumbai | https://mtnlmumbai.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-28 | EM OV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Bharat Steel | https://bharat.steel.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-30 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Customs and Central Excise, Bhopal | https://ccobz.gov.in/posting.html | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-30 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Office of the Chief Commissioner, Customs, Central Excise and Service Tax, Bhopal | https://ccobz.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-09-30 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Armed Forces Tribunal Principal Bench | https://aft.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-05 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Institute of Fisheries Nautical and Engineering Training | https://cifnet.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-05 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Central Vigilance Commission (CVC) | https://cvc.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-06 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Traditional Knowledge Digital Library (TKDL), New Delhi | https://www.tkdl.res.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-07 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Single Window Clearance System gateway for Operationalization of Coal Mines | https://swcs.coal.gov.in/admin | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-08 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Sports Authority of India | https://sportsauthorityofindia.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-08 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Eat Right India : ‘Eat Healthy’ and ‘Eat Safe’ – An initiative of FSSAI | https://eatrightindia.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-09 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Global Indices for Reforms & Growth (GIRG), NITI Aayog | https://girg.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-12 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Capital Region Planning Board (NCRPB) | https://ncrpb.nic.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-13 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Database of Arms Licenses | https://ndal-alis.gov.in/armslicence | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Udyam Parichay online Portal | https://udyamregistration.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-14 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| National Company Law Tribunal (NCLT) | https://nclt.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-15 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
| Microdata Library | https://microdata.gov.in | Revoked | SEC_ERROR_REVOKED_CERTIFICATE |
Peer’s Certificate has been revoked. | 2026-10-16 | EM DV TLS CA – G2A-1 | eMudhra Technologies Limited |
How to read this table: “Revoked” and “Expired” reflect the specific Firefox certificate error recorded in this dataset.
What happened?
Digital certificates help browsers verify a website’s identity and establish an encrypted connection. They are issued by trusted organisations called Certificate Authorities (CAs), such as eMudhra through its emSign services.
eMudhra’s certification policies required these certificates to contain specific identifiers, known as Object Identifiers (OIDs), indicating the type of certificate issued. However, several certificates were found to be missing these identifiers. The issue was reported to eMudhra on 14 October 2026.
According to eMudhra’s incident report, 8,288 affected certificates were still valid as of 15 October. eMudhra corrected the issue in its issuing systems and revoked the affected certificates on 19 October, marking them as “Superseded”.
However, revoking a certificate does not automatically replace it on a website. Website administrators must install replacement certificates themselves. Several Indian government websites have continued to serve the revoked certificates even after eMudhra withdrew them.
Government websites continue to serve revoked certificates
In a report published on 23 October 2026, independent cybersecurity researcher Nemo identified 9,356 revoked certificates under the RSA-based emSign Root CA-G1 hierarchy. A scan of 8,947 government hosts reportedly found that 773 Indian government websites were still serving one of these revoked certificates as of 25 October 2026. Our own examination of government website domains has also identified instances where revoked certificates continued to be served after eMudhra had marked them as superseded.
The continued use of revoked certificates by websites providing judicial, regulatory, welfare, identity-related and other public services raises serious concerns. Visitors to these websites should be able to rely on the security mechanisms that are meant to protect their connections, particularly when accessing services that may involve personal information or sensitive transactions.
Caption: Error found when visiting the National Green Tribunal’s website greentribunal.gov.in
It is also worth noting that some government websites appear to have replaced their certificates since the issue came to light. This demonstrates that remediation is possible, but also highlights the need for all affected website operators to act without delay.
Caption: The website for the National Cybercrime Reporting Portal (NCRP) at cybercrime.gov.in had its certificate replaced on 28th October 2026, five days after Nemo’s initial report, and 13 days after eMudhra reportedly revoked the certificate.
What next?
We urge the administrators and owners of all government websites listed in the dataset to replace their revoked certificates post haste and ensure that the replacement certificates are correctly configured and served by their respective web servers.
We also urge MeitY and CERT-In to coordinate with the concerned government departments and ensure that remediation is completed and independently verified, rather than relying solely on assurances that corrective action has been initiated.
A certificate’s revocation is meaningful only if the affected website stops using it. Until that happens, users remain exposed to inconsistent security signals and the public trust placed in government digital infrastructure continues to be undermined. The responsibility for maintaining secure government websites cannot be transferred to users or left to individual browsers to enforce. It rests with the organisations that operate these services, the authorities responsible for oversight, and the Certificate Authorities entrusted with maintaining the integrity of the web’s trust infrastructure.
