Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:18:00 2011 GMT
+            Not After : Dec  7 02:18:00 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:b7:ec:1f:03:b2:5c:d0:b6:c4:c1:b3:55:aa:6f:
+                    b7:b7:46:c5:fb:1c:da:85:2c:01:21:f1:1f:9f:f9:
+                    0a:66:fe:97:6f:ef:3e:b4:c4:44:a0:b1:2e:d5:f8:
+                    f7:79:b5:e3:c2:ad:71:b7:a1:27:b5:15:1b:77:a3:
+                    2e:0b:f2:52:af:7b:11:d7:28:27:3b:97:89:c8:35:
+                    74:42:0a:d6:24:d6:a3:ea:71:45:b3:95:03:1d:e8:
+                    57:10:0f:6e:53:fa:ee:b5:ad:8b:e1:62:62:6d:2f:
+                    91:5a:89:ef:68:c8:82:1c:a3:ce:62:a5:8e:55:97:
+                    98:35:27:5e:9b:ec:bf:5a:18:3c:97:ac:39:d2:13:
+                    d5:15:de:6b:b9:ce:f6:6a:ca:4c:f4:ba:bf:d4:e3:
+                    53:df:fc:fe:57:70:7e:97:be:d2:19:0a:9e:d2:66:
+                    3a:4c:70:9e:18:8f:f7:3f:56:f9:bf:5d:1b:a4:3f:
+                    65:50:d7:f4:2d:63:b5:70:56:db:22:fc:67:b8:be:
+                    b8:e2:6d:bb:dc:67:2c:3b:ce:7c:1e:89:ae:35:9a:
+                    bf:67:01:51:02:d2:7f:2f:71:07:27:9b:8c:03:23:
+                    fb:bb:82:2f:20:4c:7e:d9:ca:82:6a:46:ae:ba:04:
+                    03:d2:66:2b:75:88:b1:f8:be:dc:9d:17:cf:73:86:
+                    63:8f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        35:86:43:22:81:bf:eb:ea:33:5a:cb:11:84:bc:c3:20:cf:f0:
+        b7:44:f9:25:27:98:3f:70:55:df:83:70:00:de:02:20:ee:83:
+        ae:88:24:03:16:30:cb:17:e0:0b:28:bf:03:f7:0f:a5:68:ba:
+        95:be:46:a3:c6:bc:c0:7a:01:6d:02:7d:b7:06:92:bb:33:68:
+        bc:64:2f:d6:f9:a3:5d:00:33:81:24:ae:d8:b9:5a:c0:89:a6:
+        2b:ef:fc:25:d0:3c:93:05:b2:cf:9a:d2:1f:7f:1c:6f:cf:a8:
+        a8:3b:db:65:0e:22:34:21:cc:d4:04:0d:86:c0:02:b2:89:9d:
+        da:37:7b:4b:a1:66:a5:e9:fe:67:c0:9b:45:f7:5c:10:1e:9f:
+        3d:1b:dd:13:97:cf:3f:3c:59:e9:2a:52:da:ab:40:9f:cf:f5:
+        d6:23:e3:86:ab:3e:14:87:09:d7:ce:34:eb:a3:1a:d1:49:63:
+        5a:9d:e0:c7:96:cd:8b:97:03:0f:ba:24:59:8c:c5:f8:ee:c6:
+        23:de:8d:53:d3:9a:a0:c8:47:dc:a6:ac:61:a2:bd:5c:7a:07:
+        39:0a:59:fc:55:af:68:39:40:f8:9f:24:3e:35:23:e4:c5:bb:
+        70:8a:6d:43:31:32:b3:28:79:55:c5:e4:ba:34:94:08:57:af:
+        26:8b:44:bd
+-----BEGIN CERTIFICATE-----
+MIIDEjCCAfoCAgDuMA0GCSqGSIb3DQEBBQUAMCgxJjAkBgNVBAMMHTIwNDggcnNh
+IFRlc3QgaW50ZXJtZWRpYXRlIENBMB4XDTExMTIxMDAyMTgwMFoXDTIxMTIwNzAy
+MTgwMFowYDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNV
+BAcMDU1vdW50YWluIFZpZXcxEDAOBgNVBAoMB1Rlc3QgQ0ExEjAQBgNVBAMMCTEy
+Ny4wLjAuMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALfsHwOyXNC2
+xMGzVapvt7dGxfsc2oUsASHxH5/5Cmb+l2/vPrTERKCxLtX493m148KtcbehJ7UV
+G3ejLgvyUq97EdcoJzuXicg1dEIK1iTWo+pxRbOVAx3oVxAPblP67rWti+FiYm0v
+kVqJ72jIghyjzmKljlWXmDUnXpvsv1oYPJesOdIT1RXea7nO9mrKTPS6v9TjU9/8
+/ldwfpe+0hkKntJmOkxwnhiP9z9W+b9dG6Q/ZVDX9C1jtXBW2yL8Z7i+uOJtu9xn
+LDvOfB6JrjWav2cBUQLSfy9xByebjAMj+7uCLyBMftnKgmpGrroEA9JmK3WIsfi+
+3J0Xz3OGY48CAwEAAaMTMBEwDwYDVR0RBAgwBocEfwAAATANBgkqhkiG9w0BAQUF
+AAOCAQEANYZDIoG/6+ozWssRhLzDIM/wt0T5JSeYP3BV34NwAN4CIO6DrogkAxYw
+yxfgCyi/A/cPpWi6lb5Go8a8wHoBbQJ9twaSuzNovGQv1vmjXQAzgSSu2LlawImm
+K+/8JdA8kwWyz5rSH38cb8+oqDvbZQ4iNCHM1AQNhsACsomd2jd7S6Fmpen+Z8Cb
+RfdcEB6fPRvdE5fPPzxZ6SpS2qtAn8/11iPjhqs+FIcJ184066Ma0UljWp3gx5bN
+i5cDD7okWYzF+O7GI96NU9OaoMhH3KasYaK9XHoHOQpZ/FWvaDlA+J8kPjUj5MW7
+cIptQzEysyh5VcXkujSUCFevJotEvQ==
+-----END CERTIFICATE-----