You&#x27;d be right if the developers were distributing their apps on their own - once Apple has put up a service in the form of the App Store and are taking a 30% cut out of every sale, it&#x27;s their responsibility to keep it running. If that means detecting that many apps use incompatible OpenSSL and communicating with the developers to address that issue before rolling out SHA-2 cert, so be it - all competent services companies do things like these all the time.<p>It&#x27;s not as if there wasn&#x27;t a way for Apple to detect this (if there wasn&#x27;t then again it&#x27;s their own fault) and it wasn&#x27;t as if they couldn&#x27;t have renewed with another SHA-1 cert for a few months until they figured out how to roll out SHA-2 one without causing a lot of people a lot of trouble.