It's a bit much in terms of... feigned malice. What I mean by that is, it should be trivial for these organizations to both find an in-country vendor, but also

It's a bit much in terms of... feigned malice. What I mean by that is, it should be trivial for these organizations to both find an in-country vendor, but also rotate a certificate/keypair. It's entirely punitive yet (I imagine) ineffective. I understand halting business with a region given they probably aren't sure they'd be paid with the ever-growing sanctions