Comment by sippingabonedry

The individual CA's host the OCSP and CRLs, not Apple.

It's possible the Indian CA is overloaded.

My question is why the system trust store has not been updated to distrust the shady root CA?