Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,59 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=768 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:18:00 2011 GMT
+            Not After : Dec  7 02:18:00 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:ad:d8:b0:e3:bb:38:0e:4c:83:0d:d1:8a:5b:a9:
+                    05:91:2e:04:8a:70:b4:3a:5c:21:8b:b7:b5:f8:32:
+                    ab:0e:a8:ef:1b:c7:9e:70:89:7f:68:d6:de:c2:fc:
+                    e6:10:92:1e:27:4c:a5:33:41:41:e6:16:79:9c:fe:
+                    a4:57:56:ac:a4:e9:45:44:18:5f:6c:9d:84:a0:01:
+                    40:7f:6f:8c:62:8d:e1:e0:b7:07:70:f0:51:cb:0d:
+                    29:cc:2a:c6:fe:5d:78:a4:e6:e7:3f:f1:72:ef:e1:
+                    db:10:34:fd:a8:d0:09:94:1f:8c:dd:fe:00:b4:1e:
+                    eb:59:b3:cd:74:e3:57:42:96:ad:61:dc:6e:7c:92:
+                    63:6a:5d:e1:65:98:45:09:73:36:58:b5:50:67:bd:
+                    2f:ab:0c:fa:7f:f1:97:1f:dd:13:31:bd:97:9d:c6:
+                    99:28:0e:9e:b7:4a:aa:d8:13:49:4c:5d:9c:48:25:
+                    1d:48:d0:ae:df:81:f3:3a:94:de:3c:72:a8:26:32:
+                    19:5b:8a:3a:06:1f:9e:c2:f1:2a:d5:24:9e:04:dc:
+                    3c:9a:14:6b:88:59:b1:eb:5f:6b:a2:dd:f5:26:27:
+                    be:b7:cc:57:07:8a:fc:3f:71:84:f2:1d:a5:ad:fa:
+                    46:38:22:9c:a5:ef:19:de:c4:47:56:23:35:41:13:
+                    db:bb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        73:eb:8b:1a:6b:d3:b2:02:4f:61:c5:45:a3:9d:1e:37:eb:f8:
+        9a:8d:a5:1f:56:bf:bd:76:21:59:3e:19:43:85:4b:6f:d0:e1:
+        af:f1:23:62:bc:c8:f5:7d:70:43:40:9f:c5:da:75:1b:68:f5:
+        d4:e3:9a:a3:bd:06:1c:f9:b7:43:69:bd:a1:8b:c5:c6:8a:e8:
+        da:fc:ae:19:ee:b2:73:a6:0a:c4:9d:79:6c:6f:07:65:75:fa:
+        f7:e2:69:92:38:cf
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----