The root CA alone wasn't sufficient — both smartspeech.sber.ru and
ngw.devices.sberbank.ru use a 3-level chain (Root CA → Sub CA → Server).
Bundle includes both the Russian Trusted Root CA and Sub CA.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>