Yes, exactly what the Apple article highlights! Appreciate the extra context.

CLI-based activity references etc/ssl/cert.pem. While they say this will be updated in the future (likely the next dot release), admins can also proactively remove the eMudhra entries.