Go will reject certificate chains containing eight distrusted SPKIs
I downloaded the CA cert data from https://www.ccadb.org/resources and it seems to be affecting 16 certs, all from eMudhra. I complied the list here https://gist.github.com/mendymm/ff7a9fd00339260b4d2dbdcb0f489b57 Comments
We haven't written up this one. Lobsters has the full story — the link below goes straight to it.