Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/768-rsa-intermediate.pem

Index: net/data/ssl/certificates/768-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/768-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/768-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,60 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 236 (0xec)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 RSA Test Root CA
+        Validity
+            Not Before: Dec 10 02:17:59 2011 GMT
+            Not After : Dec  7 02:17:59 2021 GMT
+        Subject: CN=768 rsa Test intermediate CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (768 bit)
+                Modulus (768 bit):
+                    00:bd:0a:85:9b:88:1b:1a:7e:ff:d2:fe:d1:38:39:
+                    38:fd:bb:be:db:4a:cd:ca:da:25:1b:f5:6a:63:b7:
+                    64:82:18:45:ae:60:1d:6e:ce:0e:aa:31:42:c5:76:
+                    5b:8f:84:ad:61:ce:89:69:55:77:bb:cd:6e:2d:c0:
+                    75:fa:87:6e:0d:23:08:23:0f:1b:32:a4:78:8f:0b:
+                    0f:36:b1:b1:ac:39:bc:3a:84:42:bf:4f:c2:fa:75:
+                    db:3f:a9:b1:4a:ee:c1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                CD:C5:B2:E8:61:4D:DF:FD:D5:CB:7C:43:A7:F5:14:42:26:68:41:01
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+        1f:f5:cc:a6:78:f3:cb:30:90:56:17:02:4a:9f:3e:ea:25:9a:
+        53:8e:53:f2:a3:09:26:94:ff:b4:ca:69:93:c4:aa:d7:ae:ee:
+        fa:b5:c9:31:64:4b:43:84:29:18:15:b5:49:d0:9f:4e:bc:28:
+        fa:7c:20:fb:71:a0:c2:d7:63:71:87:3e:dd:65:a4:a5:c0:6e:
+        b0:4a:02:6c:bf:2f:67:1c:e4:16:6c:71:8b:de:99:a5:9b:46:
+        d0:22:8b:00:f2:84:bc:21:00:30:5e:37:b1:2a:bf:a9:6c:40:
+        c6:04:f4:57:e8:6b:46:9f:a1:7f:a5:2c:6d:20:04:86:01:a8:
+        d0:50:22:69:8d:34:dd:a2:fe:21:b4:48:19:8f:b9:f6:d2:65:
+        1b:78:95:9b:54:40:95:98:79:4a:97:9d:36:fc:31:5c:45:98:
+        ea:69:19:75:8d:92:20:a3:67:38:3f:7a:a7:e3:ea:0b:49:1c:
+        f1:8c:d5:de:ca:9d:f2:aa:98:a4:d8:4e:8e:1d:ed:42:a0:82:
+        a5:71:1d:ea:30:d9:15:e6:75:c6:42:46:26:26:79:aa:55:e4:
+        3d:1d:82:03:73:c6:71:a8:0a:6e:50:3b:a2:bc:d9:a3:6c:93:
+        c7:b1:a2:61:67:2e:d6:ff:ad:30:30:e6:00:e3:d4:73:13:ba:
+        f0:70:1b:00
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----