emudhra

Critical Government Websites Are Still Serving Revoked Certificates! A Tracker by SFLC.in

A number of Indian government websites have continued to use digital security certificates that were revoked more than 8 days ago by eMudhra, a licensed Indian Certifying Authority. These certificates were revoked after eMudhra identified that they had been issued without certain certificate policy identifiers required under its own certification policies. Despite the revocation, several government websites continued to serve these certificates. The issue is particularly concerning because the affected websites include public-facing government services, judicial institutions, regulatory bodies and other important public infrastructure.

SFLC.in has written to the Ministry of Electronics and Information Technology (MeitY), the Indian Computer Emergency Response Team (CERT-In), and eMudhra, seeking accountability and urgent corrective action.

We have also compiled a dataset identifying government domains that continue to serve revoked certificates, which is being published alongside this blog. The purpose of publishing this information is to make the scale of the issue more transparent and to help identify the government websites that require immediate remediation.

 

Government Websites Reporting eMudhra Certificate Errors

Dataset of 89 website checks recorded between 2026-03-31 and 2026-10-16. The browser reported certificate revocation or expiration errors for the listed sites.

89Websites in dataset
81Revoked certificate errors
8Expired certificate errors

Showing 89 of 89 records

Website / ServiceWebsite URLReported status Browser error codeBrowser messageRecorded date Certificate issuer (CN)Issuer organisation
Project Assessment Infrastructure Monitoring and Analytics for Nation-Building (PAIMANA) https://ipm.mospi.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-03-31 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Press Council of India (PCI) https://presscouncil.nic.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-05-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Indian Public Health Standards (IPHS) https://iphs.mohfw.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-06-13 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Railway Recruitment Board (RRB), Bangalore https://www.rrbbnc.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-06-27 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Metallurgist Award Scheme https://awards.steel.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-07-03 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Command Area Development & Water Management Information System (CADWM-IS) https://cadwm.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-07-11 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
BCG Vaccine Laboratory, Chennai https://dirbcglab.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-07-20 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Initiative for Developing and Harnessing Innovations (NIDHI) https://nidhi.dst.gov.in Expired SEC_ERROR_EXPIRED_CERTIFICATE Peer’s Certificate has expired. 2026-07-24 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Department of Food and Public Distribution (DFPD) https://dfpd.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-05 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Indian Grain Storage Management and Research Institute (IGMRI) https://igmri.dfpd.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-05 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Bharatiya Nabhikiya Vidyut Nigam Limited (BHAVINI) https://bhavini.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-06 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Transmission Utility of India Ltd. (CTUIL) https://ctuil.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-07 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Indian Institute of Integrative Medicine (IIIM) https://iiim.res.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-07 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Institute of Food Technology Entrepreneurship and Management (NIFTEM), Kundli https://niftem.ac.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-08 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
NEPA Limited https://www.nepamills.co.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-10 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
MoPNG Pariyojana https://pariyojana.mopng.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-11 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Centre for Next Generation Network https://www.tec.gov.in/next-generation-network-ngn-2 Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-11 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Telecommunication Engineering Centre, New Delhi https://www.tec.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-11 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Assessment Centre (NAC) https://naccustoms.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-12 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Capital Region Planning Board https://ncrpbprojects.mohua.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-12 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Institute of Plant Genome Research, New Delhi https://nipgr.ac.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-13 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Unique Disability ID (UDID) https://www.swavlambancard.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-13 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
Central Council for Research in Homoeopathy (CCRH) https://ccrhindia.ayush.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Online Indenting Recruitment Management System https://oirms-ir.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Hindi Training Institute https://chti.rajbhasha.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-17 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Jal Sanchay Jan Bhagidari https://jsjb.mowr.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-17 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Water Resource Census Application https://wrcensus.mowr.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-17 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Cluster Development Programme https://cluster.dcmsme.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-18 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Fire Service College https://nfscnagpur.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-18 EM EV TLS CA – G2A-1 eMudhra Technologies Limited
Procurement and Marketing Support Scheme (PMS Portal) https://pms.dcmsme.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-18 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Pashu Aushadhi Vikray Kendra https://pashuaushadhi.dahd.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-22 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Ayushman Arogya Mandir https://aam.mohfw.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-24 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
DST Direct Recruitment https://recruitment.dst.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-25 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Food Corporation of India https://fci.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-25 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Council for Vocational Education and Training (NCVET) https://ncvet.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-25 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Good Laboratory Practice Compliance Monitoring Authority https://ngcma.dst.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-25 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Integrated Pharmaceutical Database Management System 2.0 (IPDMS) https://nppaipdms.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-08-31 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Services eHealth Assistance and Teleconsultation (SeHAT) https://sehatopd.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-01 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Animal Welfare Board of India (AWBI) https://awbi.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-03 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Atomic Energy Education Society (AEES) https://www.aees.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-03 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Forest Survey of India (FSI) https://fsi.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-04 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
NCERT Books https://ncertbooks.ncert.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-04 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Crime Records Bureau https://ncrb.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-05 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
Raja Rammohun Roy Library Foundation (RRRLF) https://rrrlf.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-05 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Board of Radiation and Isotope Technology (BRIT) https://britatom.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-06 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Indian Statistical Institute (ISI), Calcutta https://www.isical.ac.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-07 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Authorised Economic Operator Programme, Indian Customs (AEO) https://aeoindia.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-08 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Press Sewa Portal https://presssewa.prgi.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-08 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Vendor Registration Application https://apovra.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-08 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
Press Registrar General of India https://prgi.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-09 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Food Grains Procurement Portal https://cfpp.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-10 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Information Security Education and Awareness (ISEA) https://www.isea.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-10 EM EV TLS CA – G2A-1 eMudhra Technologies Limited
National Qualifications Register https://nqr.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-10 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Cold Chain and Vaccine Management Resource Centre (NCCVMRC) https://nccmis.mohfw.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-12 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Centre for Materials for Electronics Technology (C-MET) https://cmet.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Petroleum and Explosives Safety Organisation (PESO) https://peso.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Bengaluru Customs Zone https://bangalorecustoms.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-15 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Institute of Psychiatry (CIP) https://cipranchi.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-15 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Indira Gandhi Rashtriya Uran Academy (IGRUA) https://igrua.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-15 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Board of Research in Nuclear Sciences https://brns.res.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-16 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
India Science, Technology and Innovation Portal (ISTI) https://indiascienceandtechnology.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-16 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Scholarships Portal https://scholarships.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-16 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
National Institute of Social Defence (NISD) https://www.nisd.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-18 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Board of Practical Training (BOPT), Easter Region https://bopter.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-21 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
National Monuments Authority (NMA) https://nma.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-21 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Civil Defence Organisation https://civildefence.indianrailways.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-22 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Stay Safe Online https://staysafeonline.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-23 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
Postage Stamps https://postagestamps.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-25 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Silk Board https://csb.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-26 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Council of Architecture https://www.coa.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-26 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
Northern Coalfields Limited https://www.nclcil.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-26 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Canteen Stores Departments, Mumbai https://afd.csdindia.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-28 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Mahanagar Telephone Nigam Limited (MTNL), Mumbai https://mtnlmumbai.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-28 EM OV TLS CA – G2A-1 eMudhra Technologies Limited
Bharat Steel https://bharat.steel.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-30 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Customs and Central Excise, Bhopal https://ccobz.gov.in/posting.html Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-30 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Office of the Chief Commissioner, Customs, Central Excise and Service Tax, Bhopal https://ccobz.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-09-30 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Armed Forces Tribunal Principal Bench https://aft.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-05 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Institute of Fisheries Nautical and Engineering Training https://cifnet.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-05 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Central Vigilance Commission (CVC) https://cvc.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-06 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Traditional Knowledge Digital Library (TKDL), New Delhi https://www.tkdl.res.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-07 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Single Window Clearance System gateway for Operationalization of Coal Mines https://swcs.coal.gov.in/admin Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-08 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Sports Authority of India https://sportsauthorityofindia.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-08 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Eat Right India : 'Eat Healthy' and 'Eat Safe' – An initiative of FSSAI https://eatrightindia.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-09 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Global Indices for Reforms & Growth (GIRG), NITI Aayog https://girg.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-12 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Capital Region Planning Board (NCRPB) https://ncrpb.nic.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-13 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Database of Arms Licenses https://ndal-alis.gov.in/armslicence Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Udyam Parichay online Portal https://udyamregistration.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-14 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
National Company Law Tribunal (NCLT) https://nclt.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-15 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
Microdata Library https://microdata.gov.in Revoked SEC_ERROR_REVOKED_CERTIFICATE Peer’s Certificate has been revoked. 2026-10-16 EM DV TLS CA – G2A-1 eMudhra Technologies Limited
No matching records found.

How to read this table: “Revoked” and “Expired” reflect the specific Firefox certificate error recorded in this dataset. They are not, by themselves, an independent forensic determination of why a certificate was rejected or who caused the issue.

What happened?

Digital certificates help browsers verify a website’s identity and establish an encrypted connection. They are issued by trusted organisations called Certificate Authorities (CAs), such as eMudhra through its emSign services.

eMudhra’s certification policies required these certificates to contain specific identifiers, known as Object Identifiers (OIDs), indicating the type of certificate issued. However, several certificates were found to be missing these identifiers. The issue was reported to eMudhra on 14 October 2026.

According to eMudhra’s incident report, 8,288 affected certificates were still valid as of 15 October. eMudhra corrected the issue in its issuing systems and revoked the affected certificates on 19 October, marking them as “Superseded”.

However, revoking a certificate does not automatically replace it on a website. Website administrators must install replacement certificates themselves. Several Indian government websites have continued to serve the revoked certificates even after eMudhra withdrew them.

Government websites continue to serve revoked certificates

In a report published on 23 October 2026, independent cybersecurity researcher Nemo identified 9,356 revoked certificates under the RSA-based emSign Root CA-G1 hierarchy. A scan of 8,947 government hosts reportedly found that 773 Indian government websites were still serving one of these revoked certificates as of 25 October 2026. Our own examination of government website domains has also identified instances where revoked certificates continued to be served after eMudhra had marked them as superseded.

The continued use of revoked certificates by websites providing judicial, regulatory, welfare, identity-related and other public services raises serious concerns. Visitors to these websites should be able to rely on the security mechanisms that are meant to protect their connections, particularly when accessing services that may involve personal information or sensitive transactions.

Caption: Error found when visiting the National Green Tribunal’s website greentribunal.gov.in 

It is also worth noting that some government websites appear to have replaced their certificates since the issue came to light. This demonstrates that remediation is possible, but also highlights the need for all affected website operators to act without delay.

Caption: The website for the National Cybercrime Reporting Portal (NCRP) at cybercrime.gov.in had its certificate replaced on 28th October 2026, five days after Nemo’s initial report, and 13 days after eMudhra reportedly revoked the certificate.

What next?

We urge the administrators and owners of all government websites listed in the dataset to replace their revoked certificates post haste and ensure that the replacement certificates are correctly configured and served by their respective web servers.

We also urge MeitY and CERT-In to coordinate with the concerned government departments and ensure that remediation is completed and independently verified, rather than relying solely on assurances that corrective action has been initiated.

A certificate’s revocation is meaningful only if the affected website stops using it. Until that happens, users remain exposed to inconsistent security signals and the public trust placed in government digital infrastructure continues to be undermined. The responsibility for maintaining secure government websites cannot be transferred to users or left to individual browsers to enforce. It rests with the organisations that operate these services, the authorities responsible for oversight, and the Certificate Authorities entrusted with maintaining the integrity of the web’s trust infrastructure.