Germany's Cybersecurity Authority (BSI) Has an Untrusted TLS Certificate on Every Apple Device

Update (April 5, 2026, ~09:40 CEST): The BSI has fixed the issue. The server now sends a cross-signed certificate for D-TRUST BR Root CA 2 2023, issued by D-TRUST Root Class 3 CA 2 2009 (which Apple trusts). The leaf certificate is unchanged &ndash; they added a bridge cert to the chain. Safari and /usr/bin/curl on macOS now verify successfully. The cross-signed certificate is byte-for-byte…