About the compromised eMudhra intermediate CAs
Summary
Apple reports that 12 compromised intermediate eMudhra CAs are being blocked automatically on Apple devices, affecting TLS certificates and some code-signing certs. The page details which CAs are affected, how the block is deployed, and guidance for administrators who use command-line tools that rely on /etc/ssl/cert.pem, including steps to back up and remove specific root CAs. It also lists the affected certificates and notes ongoing updates are expected.