Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,75 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 RSA Test Root CA
+        Validity
+            Not Before: Dec 10 02:17:59 2011 GMT
+            Not After : Dec  7 02:17:59 2021 GMT
+        Subject: CN=2048 rsa Test intermediate CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:b0:0a:7f:35:74:21:24:2c:2b:14:a5:dd:09:1b:
+                    35:f3:68:9b:05:55:03:19:3f:b3:15:8c:7c:88:91:
+                    26:d4:8c:33:74:32:76:d5:a4:9b:42:8d:3b:a9:9b:
+                    65:48:fb:9a:a1:3a:32:5e:9a:bb:e4:74:bd:6b:5f:
+                    36:c0:fb:7e:84:b8:cd:37:83:9b:c2:eb:76:e2:7f:
+                    45:e4:f2:3f:78:0b:b1:9d:e1:55:8e:ab:cc:a2:8b:
+                    38:29:44:81:20:8d:4b:69:e3:4d:32:8d:85:4f:bb:
+                    07:a6:c0:1e:60:57:0b:48:5e:64:90:05:50:9d:28:
+                    da:b8:b7:0e:df:7a:d1:ac:36:0f:80:71:5b:e0:5c:
+                    80:85:ab:f2:ad:82:7b:b9:be:bf:db:98:66:b4:20:
+                    c8:a9:b2:fe:5d:64:4e:18:39:e4:72:73:a9:8f:d0:
+                    84:d8:3b:aa:89:88:27:a4:4d:d8:70:1f:56:d2:52:
+                    44:bd:b5:90:88:5f:3c:f7:f3:0d:04:0b:66:33:38:
+                    cd:11:72:a2:23:51:5a:da:41:ac:09:34:aa:26:94:
+                    eb:29:76:0e:86:43:8c:f9:b1:f5:53:f3:c6:95:6f:
+                    93:9a:f3:3f:a7:4f:30:5b:71:b7:4d:12:eb:77:ca:
+                    19:db:97:0b:95:05:bc:77:01:1b:c7:58:56:07:56:
+                    4f:69
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                5C:39:E3:53:29:A2:A0:DF:53:5E:C8:FB:29:27:13:E2:46:47:B7:77
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+        13:c2:6c:1a:08:3e:04:82:f1:f1:d6:5b:f0:d3:97:c1:3e:e3:
+        e8:31:3f:1d:d6:a4:b6:2d:06:a9:a2:b7:52:6d:17:78:35:e5:
+        6a:40:b1:3d:11:79:6f:7d:5b:76:62:48:bd:b8:c4:39:c2:0c:
+        07:14:16:74:d0:8f:3a:64:cd:b4:90:7e:48:21:ab:1f:2f:0e:
+        b5:57:03:b1:1d:4a:c9:70:38:93:bf:0f:a1:22:60:98:bf:ce:
+        ec:fc:f8:f0:bf:76:ca:8f:bc:c3:47:a0:42:92:c8:e4:dc:76:
+        5e:a0:2e:bc:c6:07:33:07:bb:2b:0b:d6:bf:2f:09:4e:6e:12:
+        70:12:45:05:6b:c1:f9:58:54:12:d1:2d:6d:ff:21:c3:e6:35:
+        17:93:f4:94:5a:1e:66:7b:f1:42:b4:32:05:3e:ba:b2:ac:7d:
+        0d:37:c0:ef:ea:20:6e:40:04:0e:50:eb:93:af:02:6d:63:6d:
+        be:a9:d2:a6:c9:ba:c3:10:1c:22:e2:0f:89:eb:3c:58:bb:a6:
+        81:1b:22:eb:c6:0b:08:ee:59:7a:c1:0b:5b:62:98:fc:94:1b:
+        c3:52:99:d2:98:8d:30:c9:95:cf:72:1c:1a:7f:df:d7:38:77:
+        e3:91:ef:11:f4:b1:ec:29:83:31:cb:05:7f:b9:3a:f9:49:7e:
+        be:5a:f0:18
+-----BEGIN CERTIFICATE-----
+MIIDBjCCAe6gAwIBAgICAO4wDQYJKoZIhvcNAQEFBQAwIDEeMBwGA1UEAwwVMjA0
+OCBSU0EgVGVzdCBSb290IENBMB4XDTExMTIxMDAyMTc1OVoXDTIxMTIwNzAyMTc1
+OVowKDEmMCQGA1UEAwwdMjA0OCByc2EgVGVzdCBpbnRlcm1lZGlhdGUgQ0EwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCn81dCEkLCsUpd0JGzXzaJsF
+VQMZP7MVjHyIkSbUjDN0MnbVpJtCjTupm2VI+5qhOjJemrvkdL1rXzbA+36EuM03
+g5vC63bif0Xk8j94C7Gd4VWOq8yiizgpRIEgjUtp400yjYVPuwemwB5gVwtIXmSQ
+BVCdKNq4tw7fetGsNg+AcVvgXICFq/Ktgnu5vr/bmGa0IMipsv5dZE4YOeRyc6mP
+0ITYO6qJiCekTdhwH1bSUkS9tZCIXzz38w0EC2YzOM0RcqIjUVraQawJNKomlOsp
+dg6GQ4z5sfVT88aVb5Oa8z+nTzBbcbdNEut3yhnblwuVBbx3ARvHWFYHVk9pAgMB
+AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFw541MpoqDfU17I+ykn
+E+JGR7d3MA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAE8JsGgg+
+BILx8dZb8NOXwT7j6DE/Hdakti0GqaK3Um0XeDXlakCxPRF5b31bdmJIvbjEOcIM
+BxQWdNCPOmTNtJB+SCGrHy8OtVcDsR1KyXA4k78PoSJgmL/O7Pz48L92yo+8w0eg
+QpLI5Nx2XqAuvMYHMwe7KwvWvy8JTm4ScBJFBWvB+VhUEtEtbf8hw+Y1F5P0lFoe
+ZnvxQrQyBT66sqx9DTfA7+ogbkAEDlDrk68CbWNtvqnSpsm6wxAcIuIPies8WLum
+gRsi68YLCO5ZesELW2KY/JQbw1KZ0piNMMmVz3IcGn/f1zh345HvEfSx7CmDMcsF
+f7k6+Ul+vlrwGA==
+-----END CERTIFICATE-----