Comment by kccqzy
3 hours ago
Apple’s OCSP server may be overloaded?
I don’t know if possible on iOS but I remember multiple incidents where people recommended turning off CRL and OCSP on macOS to speed things up. That even used to be a setting in the GUI. https://imgur.com/XVHWCNz
The individual CA's host the OCSP and CRLs, not Apple.
It's possible the Indian CA is overloaded.
My question is why the system trust store has not been updated to distrust the shady root CA?