Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/prime256v1-ecdsa-intermediate.pem

Index: net/data/ssl/certificates/prime256v1-ecdsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/prime256v1-ecdsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/prime256v1-ecdsa-intermediate.pem	(revision 0)
@@ -0,0 +1,58 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 242 (0xf2)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 RSA Test Root CA
+        Validity
+            Not Before: Dec 10 02:17:59 2011 GMT
+            Not After : Dec  7 02:17:59 2021 GMT
+        Subject: CN=prime256v1 ecdsa Test intermediate CA
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+            EC Public Key:
+                pub: 
+                    04:34:07:20:c1:a1:82:68:88:e1:63:e8:67:0f:73:
+                    c5:b1:1d:ce:38:08:ad:7f:71:93:d6:34:03:55:50:
+                    7f:02:51:08:c2:c8:bd:0c:82:36:09:98:68:ad:cd:
+                    89:e4:81:bc:39:dd:25:de:74:44:d3:72:d3:d2:2d:
+                    db:09:3a:ef:d7
+                ASN1 OID: prime256v1
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                01:0E:56:26:60:9C:D4:F0:BC:2C:A5:62:52:E6:56:C3:54:07:92:0F
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+        19:f7:51:d5:9c:d4:71:07:e1:14:24:54:d8:b4:29:cf:9a:1e:
+        a6:2e:5f:68:cb:0d:01:57:35:e5:17:15:c5:3b:d5:3e:94:da:
+        6f:86:a7:2a:2e:81:9e:49:0f:af:3c:6a:49:1a:d3:11:a7:b3:
+        d7:5a:67:d8:39:a4:41:ec:3e:01:a1:74:85:30:eb:a3:60:6f:
+        ca:fb:e5:91:83:4e:65:cf:d7:7e:c0:81:fb:2c:79:f7:f4:c5:
+        6e:a3:91:23:db:12:93:7a:82:66:c0:4e:cf:33:4b:14:a0:71:
+        36:2a:77:17:6f:88:d2:75:b4:0d:76:9b:e2:f4:2c:10:0f:68:
+        d9:57:0b:5e:70:53:d7:ca:b8:eb:66:86:6c:f2:4f:2d:bf:26:
+        99:f5:94:03:06:2a:cd:ac:bc:2c:87:3d:2f:0f:40:96:92:7a:
+        b9:44:0c:12:07:24:df:a7:19:3b:fe:a5:0f:96:99:3b:a6:7b:
+        80:e4:ab:77:89:51:b8:dd:3a:60:73:3d:d3:4e:c4:e4:c5:6d:
+        d9:02:f8:17:a5:30:36:ae:2f:b8:49:86:61:84:91:57:c0:a3:
+        65:c6:87:c2:1a:ad:b6:d5:21:35:4a:33:9a:e1:2a:e4:22:de:
+        30:46:f4:f1:e2:88:1c:aa:56:a0:c6:96:c0:42:5f:ff:6b:9b:
+        60:7d:18:10
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----