1 files changed, 228 insertions, 0 deletions
diff --git a/chromium/net/data/ssl/certificates/explicit-policy-chain.pem b/chromium/net/data/ssl/certificates/explicit-policy-chain.pem
new file mode 100644
index 00000000000..df1a667b880
--- /dev/null
+++ b/chromium/net/data/ssl/certificates/explicit-policy-chain.pem
@@ -0,0 +1,228 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 236 (0xec)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=Policy Test Intermediate CA
+        Validity
+            Not Before: Jun 28 18:46:07 2013 GMT
+            Not After : Jun 26 18:46:07 2023 GMT
+        Subject: CN=policy_test.example
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:be:a4:a1:34:5f:d7:70:e7:49:5a:75:2b:c5:8a:
+                    63:43:bb:27:80:83:34:ab:42:6d:21:13:a4:4e:a7:
+                    85:4c:81:53:a4:1d:c4:bd:1b:bc:af:68:fb:4b:84:
+                    38:26:6b:79:96:a2:92:ca:4f:e3:6d:8e:b3:f4:68:
+                    f6:ea:db:57:5d:e1:7e:78:52:28:ec:91:6a:20:11:
+                    f6:35:2a:0e:4e:dc:6f:df:85:3f:ff:18:31:f6:72:
+                    81:d8:0f:e0:10:5f:cf:40:21:23:16:06:8f:7b:65:
+                    ba:8e:db:1b:b0:1f:38:1f:a2:d1:e6:06:46:89:30:
+                    fb:04:87:74:8f:95:cc:ce:4a:05:20:d8:ae:04:58:
+                    c5:8f:2f:0d:33:9d:50:0d:19:f7:e7:64:35:9a:74:
+                    0d:1c:b5:4b:05:b2:76:1f:17:ec:33:b3:a0:69:fd:
+                    52:2e:c0:f4:3b:83:0b:cd:99:ba:1e:35:b8:ac:57:
+                    d7:c9:bb:9a:d8:a0:c6:1a:86:4f:21:b6:3c:07:fc:
+                    36:16:31:7d:88:ab:6e:6f:b1:39:49:62:32:dd:61:
+                    04:12:85:6a:58:1e:8c:c6:68:05:a6:c8:ee:ac:78:
+                    8b:c7:6c:3f:20:a9:d7:e3:9a:fd:e4:d6:47:fb:53:
+                    0c:02:4c:b6:63:24:fc:b1:be:0a:2b:90:be:fd:6e:
+                    9c:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.2.3.4
+
+    Signature Algorithm: sha1WithRSAEncryption
+         3e:02:2e:1d:b2:69:0e:5a:d1:14:c7:0f:2b:b3:4d:5a:88:7a:
+         11:16:77:78:e7:d5:1f:45:08:87:e8:88:92:52:73:eb:cd:41:
+         93:41:ee:3b:fb:08:77:5d:6c:46:58:79:df:2c:60:09:79:ac:
+         3c:7b:df:be:20:7c:22:6a:eb:5b:f6:c3:f4:e7:27:83:03:14:
+         89:32:7b:d7:67:bd:0d:25:12:3a:c9:2d:82:94:1d:36:44:5f:
+         bc:23:bb:9f:a0:0c:09:19:88:4e:6d:1f:ce:83:6a:1b:6b:f0:
+         08:34:3d:6f:00:7f:b9:f8:57:90:c1:b8:7d:4d:a6:22:f2:1f:
+         45:44:41:31:d7:c5:b8:05:1c:9c:7e:72:4e:49:6c:52:07:c9:
+         6d:d8:eb:5f:c7:4a:30:49:f5:4d:bd:70:4e:18:15:c9:cd:ee:
+         45:c0:94:77:fe:9d:fc:25:9b:e9:53:e3:2f:81:c7:cd:59:14:
+         cf:e2:45:ef:04:a2:a0:17:08:60:a3:8b:75:6b:2b:fd:c5:fd:
+         92:20:53:7e:ba:28:25:87:cb:23:68:57:aa:2e:ae:22:7d:79:
+         b2:b2:66:01:00:a0:4a:7e:34:bb:b8:bc:be:c0:64:77:0c:dd:
+         3a:1e:43:54:a4:1f:29:50:c4:2e:16:65:e9:aa:2e:ee:99:1f:
+         de:00:0c:7c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 236 (0xec)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=Policy Test Root CA
+        Validity
+            Not Before: Jun 28 18:46:07 2013 GMT
+            Not After : Jun 26 18:46:07 2023 GMT
+        Subject: CN=Policy Test Intermediate CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:9b:f5:f1:b3:9a:f8:7b:5d:b6:b6:99:97:ee:a8:
+                    b5:62:2c:7a:f5:2e:04:42:d7:b3:f5:0b:10:71:50:
+                    a8:db:27:11:4c:e0:2f:40:fe:fb:08:54:df:53:86:
+                    d2:fc:f9:8b:40:a4:f4:0c:b9:ee:27:f3:be:bb:b1:
+                    e5:84:07:3c:d7:b0:75:bc:03:31:ae:e6:35:78:d5:
+                    d5:b0:3e:dc:be:3e:da:62:3b:77:90:71:f7:fd:e9:
+                    0d:d9:0a:ed:6a:59:25:b6:50:5a:d9:bd:a2:86:f2:
+                    c1:bb:ba:e3:54:b7:20:38:00:aa:f7:1c:57:e5:dd:
+                    d0:d5:75:3b:70:84:13:50:08:c0:ec:95:24:c4:8d:
+                    65:68:be:11:68:35:50:d3:d4:96:57:6c:de:3b:7e:
+                    fc:c5:dd:c0:f2:77:a4:82:22:14:18:3f:e6:4e:5b:
+                    1e:3c:28:69:99:d9:64:e3:70:30:cc:12:0b:ad:ee:
+                    ee:8e:3a:4f:f0:a1:02:dd:b1:d1:d0:3d:2c:ca:52:
+                    04:ea:98:3f:bf:14:15:5e:68:c7:ae:c6:8a:3e:4e:
+                    07:4c:d4:b3:94:4a:3d:ea:86:e2:ae:35:7b:39:0a:
+                    86:c0:f8:79:c2:61:47:59:3a:79:82:e3:56:6b:47:
+                    d9:ec:70:33:7a:11:82:71:a6:57:a3:ec:f7:e6:e6:
+                    28:5d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+            X509v3 Policy Constraints: 
+                Require Explicit Policy:0
+            X509v3 Certificate Policies: 
+                Policy: 1.2.3.4
+                Policy: 1.2.3.4.5
+                Policy: 1.2.3.5
+
+    Signature Algorithm: sha1WithRSAEncryption
+         1c:0c:79:88:11:1d:40:f2:6e:f1:d9:b7:da:2c:e1:5d:49:28:
+         e7:f5:51:27:d6:46:cc:9b:93:4c:25:ff:98:8d:91:a2:a2:92:
+         81:6f:28:a9:ef:25:ed:33:01:bd:ab:30:3c:a1:95:ff:88:f0:
+         b5:9d:06:e6:5c:9d:a0:bd:9e:e7:11:bc:ff:19:0f:81:76:42:
+         30:c6:e7:2d:2b:37:f5:03:66:71:3e:49:8e:0f:2c:42:20:93:
+         49:42:d8:fa:54:1f:4b:c9:36:ac:eb:fa:fe:e4:bc:31:54:30:
+         5f:f6:ba:0b:f5:3b:84:79:9d:f2:a9:c2:ca:4c:1b:37:f7:f6:
+         23:f9:64:56:1e:84:78:f2:57:0b:81:63:51:db:00:8b:eb:52:
+         54:d5:c5:d3:b5:e9:0a:82:26:cd:42:7b:64:8a:50:f4:fd:d4:
+         9f:38:d5:27:9c:55:13:6f:ce:65:06:27:8c:e8:08:5b:fc:f9:
+         5d:b5:57:89:36:20:44:ac:bf:89:77:55:e7:65:38:13:86:93:
+         af:54:7e:f6:2a:24:6a:28:ed:da:23:96:6f:24:be:ec:30:95:
+         80:f9:77:1f:57:48:6f:56:f9:ab:13:25:91:4a:0a:cc:ff:3b:
+         6a:43:9d:30:67:6f:06:5a:5c:3f:4a:be:4e:bf:2d:69:35:bd:
+         95:c2:99:5d
+-----BEGIN CERTIFICATE-----
+MIIDEjCCAfqgAwIBAgICAOwwDQYJKoZIhvcNAQEFBQAwHjEcMBoGA1UEAwwTUG9s
+aWN5IFRlc3QgUm9vdCBDQTAeFw0xMzA2MjgxODQ2MDdaFw0yMzA2MjYxODQ2MDda
+MCYxJDAiBgNVBAMMG1BvbGljeSBUZXN0IEludGVybWVkaWF0ZSBDQTCCASIwDQYJ
+KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJv18bOa+HtdtraZl+6otWIsevUuBELX
+s/ULEHFQqNsnEUzgL0D++whU31OG0vz5i0Ck9Ay57ifzvrux5YQHPNewdbwDMa7m
+NXjV1bA+3L4+2mI7d5Bx9/3pDdkK7WpZJbZQWtm9oobywbu641S3IDgAqvccV+Xd
+0NV1O3CEE1AIwOyVJMSNZWi+EWg1UNPUllds3jt+/MXdwPJ3pIIiFBg/5k5bHjwo
+aZnZZONwMMwSC63u7o46T/ChAt2x0dA9LMpSBOqYP78UFV5ox67Gij5OB0zUs5RK
+PeqG4q41ezkKhsD4ecJhR1k6eYLjVmtH2exwM3oRgnGmV6Ps9+bmKF0CAwEAAaNS
+MFAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwDAYDVR0kBAUwA4AB
+ADAfBgNVHSAEGDAWMAUGAyoDBDAGBgQqAwQFMAUGAyoDBTANBgkqhkiG9w0BAQUF
+AAOCAQEAHAx5iBEdQPJu8dm32izhXUko5/VRJ9ZGzJuTTCX/mI2RoqKSgW8oqe8l
+7TMBvaswPKGV/4jwtZ0G5lydoL2e5xG8/xkPgXZCMMbnLSs39QNmcT5Jjg8sQiCT
+SULY+lQfS8k2rOv6/uS8MVQwX/a6C/U7hHmd8qnCykwbN/f2I/lkVh6EePJXC4Fj
+UdsAi+tSVNXF07XpCoImzUJ7ZIpQ9P3UnzjVJ5xVE2/OZQYnjOgIW/z5XbVXiTYg
+RKy/iXdV52U4E4aTr1R+9iokaijt2iOWbyS+7DCVgPl3H1dIb1b5qxMlkUoKzP87
+akOdMGdvBlpcP0q+Tr8taTW9lcKZXQ==
+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 9822402887813377013 (0x88502f6298e32bf5)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=Policy Test Root CA
+        Validity
+            Not Before: Jun 28 18:46:07 2013 GMT
+            Not After : Jun 26 18:46:07 2023 GMT
+        Subject: CN=Policy Test Root CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a5:39:54:40:12:d5:30:51:aa:fc:bb:85:24:5a:
+                    76:19:e5:f5:54:d0:6c:c2:99:18:45:03:89:da:29:
+                    17:41:53:ac:89:1c:1c:46:b5:b6:78:d8:66:88:d1:
+                    bf:83:6b:73:fb:43:0a:10:66:44:43:6e:a2:d7:d5:
+                    b4:90:48:9f:ff:12:4a:f1:ae:6e:fb:21:d5:6d:7d:
+                    46:e5:96:41:80:4a:32:ee:e0:84:1e:22:2c:91:6a:
+                    62:08:18:7a:6b:67:8e:cd:39:28:13:5d:7a:75:a8:
+                    91:66:f6:9e:75:7e:b0:12:c8:3a:ea:d1:f5:7d:fa:
+                    c8:3c:04:15:d8:63:5a:9e:3b:ad:4c:3c:e7:c8:f8:
+                    b3:8c:2c:d6:79:28:b1:25:6a:11:c1:6e:04:5f:bf:
+                    0e:67:74:b0:99:be:d6:b9:df:99:7d:1f:7f:57:f9:
+                    c5:78:07:73:b3:34:e4:7d:08:7c:9f:81:db:31:3f:
+                    2a:03:4b:8d:3c:23:6a:87:91:f7:f7:f2:b0:d5:83:
+                    dd:c2:b3:c2:43:d0:ee:f7:e9:09:0b:1f:b5:12:22:
+                    37:4f:d3:ad:5c:0e:ee:51:8e:da:b4:ae:26:f1:4c:
+                    9e:34:aa:1c:8b:d3:b7:7e:17:f9:cb:12:36:3f:0d:
+                    d0:b1:29:9c:9d:07:91:9b:30:9d:17:c8:a4:69:1d:
+                    60:ab
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Key Usage: critical
+                Digital Signature, Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+         33:12:f6:02:8e:73:45:09:80:8e:71:c1:52:fd:3c:48:0d:c8:
+         5a:62:64:21:ab:5b:46:6c:cd:e4:55:06:83:05:df:d7:50:78:
+         41:8a:7b:a3:39:29:81:c6:de:e1:8d:d4:d2:f6:4c:31:7b:59:
+         90:d7:ad:af:69:9e:49:e5:ca:06:f2:bf:34:55:e9:d2:40:54:
+         89:2f:b9:94:f2:a2:06:db:cf:ef:20:8d:0d:8f:3c:76:65:a4:
+         13:1d:4e:ae:de:43:a3:ed:98:4f:c0:f9:59:99:22:ba:43:cd:
+         6e:82:2a:28:69:b6:38:ec:c1:d8:bb:42:3b:44:85:c1:09:15:
+         19:ab:12:92:d6:84:a8:e8:88:7e:1c:e6:d6:82:ff:57:68:1f:
+         c7:67:6f:42:15:9e:9b:56:3f:5e:36:27:e1:68:0b:d3:a0:24:
+         7d:68:08:55:30:f1:a5:2d:e7:f0:03:82:aa:2c:03:fb:78:dc:
+         81:54:db:38:8c:7e:f9:c4:7d:f1:50:1c:42:b9:6e:c0:91:9e:
+         b0:56:57:f0:0e:3d:d9:24:65:50:a1:57:a5:72:6e:8a:1f:7f:
+         fa:ab:91:33:d8:1d:9c:48:b3:60:57:b1:94:09:61:9e:a3:90:
+         b0:c2:17:13:7a:aa:b9:ad:99:dc:25:5e:d8:c8:e8:a6:88:bb:
+         fd:94:ee:4c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----