Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-1024-rsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-1024-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-1024-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-1024-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,61 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=1024 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:18:00 2011 GMT
+            Not After : Dec  7 02:18:00 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:d2:46:df:25:b3:b5:e9:6c:49:66:fe:76:00:89:
+                    bc:e4:23:85:7d:b8:f4:93:96:5f:65:1f:30:57:c2:
+                    ed:e8:97:36:2c:05:a1:71:16:5c:19:1a:07:51:29:
+                    2a:2c:ef:99:78:82:50:80:a3:8c:b4:f9:54:db:8f:
+                    d5:e8:a2:71:94:73:93:86:ec:53:b9:79:fa:65:79:
+                    a6:e3:21:9b:37:55:a1:a5:61:11:62:cd:b2:5c:a6:
+                    e1:b9:39:62:6e:15:93:3a:35:60:7c:57:34:a4:c8:
+                    23:fe:2a:ad:4c:4d:e9:2d:01:58:07:2c:f0:a7:bf:
+                    e2:94:11:10:61:99:79:62:7e:22:60:51:b5:50:d4:
+                    c3:67:b8:6e:c2:94:fa:8c:cb:74:23:23:63:44:b3:
+                    ba:61:a8:de:da:bd:3c:e3:7a:55:d3:e1:ee:72:45:
+                    5f:ea:c5:9d:e9:06:1f:de:01:fe:a4:d1:ee:d1:6b:
+                    47:ba:0c:1f:e9:37:93:04:5d:b5:0e:63:27:da:6f:
+                    ad:77:f8:10:f3:01:15:67:fd:a6:92:df:ab:b7:04:
+                    a8:9d:ba:65:82:46:c3:0c:d9:9d:be:54:6f:df:87:
+                    49:7b:0b:a6:88:d9:b8:b7:b6:73:2d:a9:06:b0:22:
+                    39:da:9c:dc:83:2a:9e:db:7d:bb:74:8b:58:77:85:
+                    8a:2f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        67:67:30:f5:a3:bd:55:a0:dd:f0:3d:99:0f:38:34:52:98:dc:
+        7e:80:49:d7:31:9b:28:c6:43:3d:6d:8d:57:71:46:ef:19:87:
+        db:7d:39:83:d3:15:be:98:8e:0f:73:96:ba:d5:c7:e5:d0:cf:
+        89:a3:6c:22:de:f8:f0:3c:f0:10:40:3d:34:48:62:d6:c8:dc:
+        5a:ce:d6:b7:aa:5a:5e:fb:85:29:d9:0e:f1:4f:52:be:76:75:
+        46:00:0d:39:75:6e:73:a4:16:a6:98:fe:12:3d:46:a3:83:ff:
+        36:16:6e:a6:fd:65:1d:b4:a6:a3:7a:96:38:7b:7f:19:29:cf:
+        79:68
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----