PI-1152 involves the MDM Device Identity Certificate not being trusted on new enrollments after updating to version 11.26.
PI-1153 concerns Device Identity Certificates being marked as untrusted in Keychain Access during enrollment in version 11.26.1.