diff --git a/src/libraries/System.Security.Cryptography/tests/X509Certificates/DynamicChainTests.cs b/src/libraries/System.Security.Cryptography/tests/X509Certificates/DynamicChainTests.cs
index b763cfc2e299a4..8a7d0131956790 100644
--- a/src/libraries/System.Security.Cryptography/tests/X509Certificates/DynamicChainTests.cs
+++ b/src/libraries/System.Security.Cryptography/tests/X509Certificates/DynamicChainTests.cs
@@ -527,6 +527,7 @@ public static void CustomTrustModeWithNoCustomTrustCerts()
         }
 
         [Fact]
+        [ActiveIssue("https://github.com/dotnet/runtime/issues/128890", TestPlatforms.Android)]
         public static void NameConstraintViolation_PermittedTree_Dns()
         {
             SubjectAlternativeNameBuilder builder = new SubjectAlternativeNameBuilder();
@@ -542,6 +543,7 @@ public static void NameConstraintViolation_PermittedTree_Dns()
         }
 
         [Fact]
+        [ActiveIssue("https://github.com/dotnet/runtime/issues/128890", TestPlatforms.Android)]
         public static void NameConstraintViolation_ExcludedTree_Dns()
         {
             SubjectAlternativeNameBuilder builder = new SubjectAlternativeNameBuilder();
@@ -598,6 +600,7 @@ public static void NameConstraintViolation_InvalidGeneralNames()
         }
 
         [ConditionalFact]
+        [ActiveIssue("https://github.com/dotnet/runtime/issues/128890", TestPlatforms.Android)]
         public static void NameConstraintViolation_ExcludedTree_Upn()
         {
             if (PlatformDetection.UsesAppleCrypto && !AppleHasExcludedSubTreeHandling)
@@ -651,6 +654,7 @@ public static void NameConstraintViolation_ExcludedTree_Upn()
         }
 
         [Fact]
+        [ActiveIssue("https://github.com/dotnet/runtime/issues/128890", TestPlatforms.Android)]
         public static void NameConstraintViolation_PermittedTree_Upn()
         {
             SubjectAlternativeNameBuilder builder = new SubjectAlternativeNameBuilder();