Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem	(revision 0)
@@ -0,0 +1,56 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: ecdsa-with-SHA1
+        Issuer: CN=prime256v1 ecdsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:18:00 2011 GMT
+            Not After : Dec  7 02:18:00 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:b8:59:0a:17:32:86:a6:aa:5e:3a:53:17:b9:c6:
+                    cb:db:6f:8b:35:57:a9:cd:7b:aa:e2:4c:1b:17:b1:
+                    de:51:c1:e3:70:af:dc:3c:a9:21:6b:15:ce:71:6f:
+                    4e:2a:1b:f9:71:5d:6b:10:3c:ae:56:31:b6:f3:6a:
+                    36:82:b7:5f:d1:34:75:1b:72:28:e5:1e:aa:ce:23:
+                    fc:b4:09:6e:d8:4b:92:e4:e2:b2:32:0e:41:a8:b0:
+                    67:60:b1:80:99:59:7e:d5:5f:87:13:11:4d:51:e2:
+                    31:a1:cd:51:a4:b6:60:fc:01:5a:16:d9:91:78:a7:
+                    db:36:c8:54:6d:c0:97:cf:de:6f:2b:a6:ca:1d:f5:
+                    49:7c:3d:83:c4:cd:2b:22:f3:03:c2:e4:9a:57:81:
+                    c8:98:37:7f:cb:98:71:2e:7c:84:1b:34:2d:e2:75:
+                    0d:00:93:fe:13:7a:dc:f4:69:6a:b0:bc:b3:54:40:
+                    ab:06:7c:3f:4f:67:16:30:6c:80:9c:f4:ad:a5:42:
+                    1c:2d:2f:a6:2d:dc:83:f7:d6:44:50:4b:fb:c3:ff:
+                    26:69:90:77:77:41:0d:19:33:29:b8:94:c9:95:7c:
+                    e4:ae:2c:04:d7:a4:b3:89:55:fd:31:9b:37:f1:47:
+                    2b:fd:3c:c2:0c:81:eb:12:52:23:37:07:b6:08:ca:
+                    dd:1f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: ecdsa-with-SHA1
+        30:45:02:20:78:56:b5:c2:a8:d0:ae:2d:49:43:87:83:9f:0c:
+        87:5d:2d:06:aa:5f:18:91:b9:f0:49:89:b8:02:46:f4:9e:5a:
+        02:21:00:a7:f7:61:92:73:3f:be:c4:7f:a3:df:07:46:bb:e6:
+        86:34:60:13:ff:de:bc:24:bc:36:e4:46:de:79:0c:d7:3f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----