This is additional information to my original query. I hope this helps for those who may have experienced the same issue and found a solution other than to blindly follow the sheep/Apple. I love Apple products as I'm sure you do, but that doesn't mean we have to "settle" for certificates we know nothing about.
After opening Keychain Access and viewing the System Roots Certificates, I find one entitled, “China internet information Center EV Certificates Root”. It evaluates as “Generic (Certificate chain validation only).
There are four more that appear suspicious to me also. One is listed as “TÜBITAK UEKAE Kök Sertifica Hizmet Saglayicisi - Sürüm 3” in addition to two others with the same name, “TÜRKTRUST Elektronik Sertifika Hizmet Saglayicisi”. One expires Sep16, 2015 and the other Dec 22, 2017
Although I make an assumption that I must have clicked on something that enabled these, I cannot say with certainty whether I did nor not. They look suspicious to me and I’m reluctant to use the keychain and I’m very tempted to remove Apple Pay from my iPhone because of these.
Just because they are valid, one never knows what is truly “necessary” and why they are there. Seriously, if these kinds of certificates are valid, I would like to know what websites use them so I can avoid them in the future.
Does anyone have any comment or suggestions regarding these? Thanks.