A certificate authority, eMudhra, is abandoning the global SSL/TLS market after a compromise of its private keys, highlighting a critical weakness in organizational dependence on complex PKI trust chains. The company is offering customers Sectigo-issued replacements and will manage the transition free of charge, maintaining revocation services until all certificates expire or are replaced. eMudhra cited increased complexity and cost due to data sovereignty and compliance as additional reasons for its exit. Experts like Yash Kadakia caution that simply moving to another root operated by the same company may not fully alleviate trust and governance concerns. Another significant issue for enterprises is their potentially limited visibility into the certificate hierarchies supporting critical services. Replacing a website's certificate might not resolve all dependencies, as many systems, including Java keystores, container images, and VPN appliances, maintain separate trust stores that do not update concurrently with browsers. Sakshi Grover of IDC advises security teams to first identify where trust decisions are made outside standard browsers and operating systems, prioritizing externally facing and mutual TLS endpoints. Subsequently, teams should determine which of these systems can be updated to distrust compromised intermediate certificates or public keys. Many organizations may struggle to even identify these non-browser trust decision points.