Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-prime256v1-ecdsa-intermediate.pem	(revision 0)
@@ -0,0 +1,56 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: ecdsa-with-SHA1
+        Issuer: CN=prime256v1 ecdsa Test intermediate CA
+        Validity
+            Not Before: Dec 12 22:47:54 2011 GMT
+            Not After : Dec  9 22:47:54 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:92:b8:c2:a0:68:77:27:d3:07:af:d4:3f:4a:d9:
+                    56:08:ec:12:e5:d1:70:0a:1f:c1:29:b9:20:2b:65:
+                    1a:de:b3:25:72:5c:3b:72:28:9e:11:d9:9f:f5:2a:
+                    8a:f5:1e:f2:d0:cd:fd:8b:ba:2f:22:19:8e:34:f8:
+                    8a:c5:df:f0:d7:c9:d9:cb:fc:18:94:9f:5d:8c:e7:
+                    c3:33:f7:b5:18:dd:48:24:16:1c:56:19:92:cf:1e:
+                    1a:aa:45:2e:85:23:57:f1:b2:6c:04:e8:75:a2:92:
+                    15:c9:02:64:96:b0:86:14:26:ab:6f:c1:4d:db:07:
+                    7b:16:61:7e:d7:26:83:5f:0b:b2:5e:08:5b:63:30:
+                    38:bf:50:92:3c:cc:57:fd:05:91:4a:f4:99:1b:a3:
+                    4b:de:99:08:2f:e4:b6:4e:e2:74:ee:35:5e:8a:9d:
+                    32:4d:60:c6:89:cf:c8:34:1b:73:95:dc:58:75:fd:
+                    fd:fb:83:08:78:09:fe:09:58:f3:c2:64:95:14:28:
+                    bd:92:c4:a4:25:9d:4e:a9:07:4b:ca:7c:ec:2b:e3:
+                    8b:f1:2e:bd:64:d4:53:c7:4a:4e:0a:b3:65:df:08:
+                    fe:37:20:db:87:8d:cc:67:62:4a:98:b2:ed:47:9a:
+                    77:26:da:b2:03:2f:59:5d:a2:41:35:78:b1:b2:85:
+                    4a:15
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: ecdsa-with-SHA1
+        30:46:02:21:00:94:ad:24:93:85:3b:9f:cf:67:8c:cc:01:31:
+        ed:8c:23:ed:79:fa:3d:88:b0:57:e1:29:71:f2:d1:15:90:cc:
+        73:02:21:00:a8:66:ce:74:c8:3f:e7:71:c2:08:46:54:5b:7b:
+        0a:a3:76:1b:13:0b:9c:0e:8d:13:c0:01:6d:2b:34:93:86:7e
+-----BEGIN CERTIFICATE-----
+MIICWDCCAf4CAgDuMAkGByqGSM49BAEwMDEuMCwGA1UEAwwlcHJpbWUyNTZ2MSBl
+Y2RzYSBUZXN0IGludGVybWVkaWF0ZSBDQTAeFw0xMTEyMTIyMjQ3NTRaFw0yMTEy
+MDkyMjQ3NTRaMGAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYw
+FAYDVQQHDA1Nb3VudGFpbiBWaWV3MRAwDgYDVQQKDAdUZXN0IENBMRIwEAYDVQQD
+DAkxMjcuMC4wLjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSuMKg
+aHcn0wev1D9K2VYI7BLl0XAKH8EpuSArZRresyVyXDtyKJ4R2Z/1Kor1HvLQzf2L
+ui8iGY40+IrF3/DXydnL/BiUn12M58Mz97UY3UgkFhxWGZLPHhqqRS6FI1fxsmwE
+6HWikhXJAmSWsIYUJqtvwU3bB3sWYX7XJoNfC7JeCFtjMDi/UJI8zFf9BZFK9Jkb
+o0vemQgv5LZO4nTuNV6KnTJNYMaJz8g0G3OV3Fh1/f37gwh4Cf4JWPPCZJUUKL2S
+xKQlnU6pB0vKfOwr44vxLr1k1FPHSk4Ks2XfCP43INuHjcxnYkqYsu1Hmncm2rID
+L1ldokE1eLGyhUoVAgMBAAGjEzARMA8GA1UdEQQIMAaHBH8AAAEwCQYHKoZIzj0E
+AQNJADBGAiEAlK0kk4U7n89njMwBMe2MI+15+j2IsFfhKXHy0RWQzHMCIQCoZs50
+yD/nccIIRlRbewqjdhsTC5wOjRPAAW0rNJOGfg==
+-----END CERTIFICATE-----