Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/prime256v1-ecdsa-ee-by-2048-rsa-intermediate.pem

Index: net/data/ssl/certificates/prime256v1-ecdsa-ee-by-2048-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/prime256v1-ecdsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/prime256v1-ecdsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,54 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 242 (0xf2)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:18:00 2011 GMT
+            Not After : Dec  7 02:18:00 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+            EC Public Key:
+                pub: 
+                    04:8b:59:a4:7e:35:02:2b:25:3b:43:11:2c:b2:5f:
+                    f7:ca:89:e8:e7:e5:77:6a:1b:79:bc:c4:74:cc:1c:
+                    7f:1d:f5:be:89:59:82:d9:6d:82:66:75:8e:7a:bd:
+                    ac:ee:cb:d0:48:ac:c1:3e:46:c0:c4:5b:78:f5:03:
+                    f3:ea:71:38:af
+                ASN1 OID: prime256v1
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        90:d4:fd:81:95:4c:52:59:e6:de:f8:a5:55:db:35:70:5e:4c:
+        74:0a:21:80:f0:c5:c5:44:2f:49:90:84:fe:31:b5:c4:9f:c1:
+        24:be:35:b6:5f:e7:2b:b0:be:b7:9d:f9:c6:11:cc:24:85:25:
+        e9:b4:d1:48:ea:9d:6e:76:56:dc:67:1b:12:b8:91:e7:de:1d:
+        80:72:49:cb:dd:9b:67:b3:b6:36:81:15:39:18:4e:88:be:b4:
+        7a:30:3b:c9:c9:3d:d7:66:f5:2c:b3:a9:33:cd:c9:92:9b:b9:
+        09:e6:4f:f4:b7:86:99:3b:74:9d:bc:d9:0e:e1:4e:48:6b:fc:
+        14:32:5f:d3:28:fe:40:7a:49:d0:10:94:4c:ae:95:ca:ad:25:
+        45:2e:5c:df:08:80:c7:db:c3:91:3d:87:8b:1f:10:31:14:6a:
+        c7:4b:61:76:a0:69:bd:fe:48:84:98:05:07:5a:bf:bc:bd:a7:
+        8e:d5:6a:65:d0:ce:02:bc:53:69:21:21:09:70:c5:8e:e2:11:
+        4e:b7:e3:69:81:9a:42:48:2f:1d:90:a3:f8:44:ed:c1:e4:6b:
+        3c:d7:e8:d5:ec:7c:40:dd:d3:ba:78:91:48:ff:b7:11:21:94:
+        03:8a:9b:94:89:68:b6:cc:9e:7f:a3:2f:ed:52:70:27:b0:8c:
+        5d:66:79:f6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----