Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/768-rsa-ee-by-2048-rsa-intermediate.pem

Index: net/data/ssl/certificates/768-rsa-ee-by-2048-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/768-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/768-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,56 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 236 (0xec)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:17:59 2011 GMT
+            Not After : Dec  7 02:17:59 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (768 bit)
+                Modulus (768 bit):
+                    00:ab:e6:5f:f5:13:7c:38:6b:f7:23:37:29:d6:16:
+                    c5:21:c2:a2:d1:ec:9b:b4:7b:58:3a:7c:fd:3a:c7:
+                    58:7b:7b:9e:b9:55:66:14:2e:e1:28:5b:63:f2:1b:
+                    16:c4:42:58:cc:2c:cc:63:af:aa:13:bb:61:5e:e7:
+                    24:30:a4:2a:77:93:5b:b2:16:7e:19:83:65:14:47:
+                    2a:bf:d7:0e:db:5c:d8:e6:bd:ad:80:c8:10:9e:df:
+                    97:ed:7f:37:a6:f3:d7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        57:41:02:ea:b3:2e:74:e9:fa:40:75:fd:63:ac:c1:34:a9:c4:
+        53:de:95:49:39:d4:bd:9c:68:39:a9:01:95:9b:c5:96:de:b9:
+        65:11:54:1e:89:a4:2e:91:a2:dd:d2:26:8f:33:33:1f:63:55:
+        e1:cb:97:f6:e9:8e:4a:f1:a8:a0:5e:8e:ce:3b:21:b3:1b:aa:
+        79:2e:11:69:da:04:eb:57:5d:58:c1:8a:f2:ab:05:83:31:1b:
+        d3:a9:91:ce:50:49:bd:04:5c:64:7d:70:aa:6e:e2:15:12:25:
+        bf:fa:31:6c:1b:c7:c9:9a:11:17:37:d1:74:cb:3d:00:10:fa:
+        fc:52:aa:fe:b4:58:e4:78:45:8a:6e:78:63:0a:11:09:c8:a3:
+        29:bc:9c:4e:0b:9c:3a:c7:1c:13:c7:8b:f9:5e:68:9b:b1:dc:
+        7f:28:3b:9e:a7:51:19:76:73:d3:32:0a:05:83:cc:5e:fb:8d:
+        88:01:73:98:bd:d1:d5:81:48:5d:c4:14:b4:bd:f8:0b:75:3c:
+        59:b5:e3:e0:70:e0:00:d3:74:f8:d8:d3:de:16:97:8d:9c:53:
+        70:9c:f5:18:51:36:30:4f:c9:c2:74:17:40:7b:53:23:f6:30:
+        2e:e9:74:0c:e8:f7:49:1f:4a:81:27:34:29:af:65:bb:37:03:
+        87:9f:35:df
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----