Or maybe it's just an selectively enforced ban using on software that doesn't accept their root certificates.