Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-secp256k1-ecdsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-secp256k1-ecdsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-secp256k1-ecdsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-secp256k1-ecdsa-intermediate.pem	(revision 0)
@@ -0,0 +1,56 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: ecdsa-with-SHA1
+        Issuer: CN=secp256k1 ecdsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 01:51:17 2011 GMT
+            Not After : Dec  9 01:51:17 2012 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:e7:10:f2:68:0c:18:a5:e5:dd:a8:4b:2f:6b:f5:
+                    71:f4:bf:dd:ef:39:69:04:38:3d:52:c5:e7:cc:b3:
+                    eb:98:57:13:4e:3e:79:cf:80:4b:d7:9d:7e:88:f3:
+                    a9:02:47:b8:d9:ec:8a:8c:34:20:aa:29:3b:a1:d6:
+                    45:23:b5:6d:36:56:3c:a4:64:13:ee:23:70:09:fa:
+                    75:83:c6:b7:be:b5:b3:3f:80:cb:ce:7b:18:1f:ac:
+                    7c:25:b6:58:bc:07:b7:35:77:2b:64:1e:ca:14:0b:
+                    d0:bb:6c:6e:1d:2f:ee:10:90:a1:ce:a9:ab:88:0a:
+                    28:74:ae:ae:ca:fc:da:c3:3a:ba:39:de:c8:1b:46:
+                    bf:93:98:a2:5b:ba:b2:a6:d8:bd:54:52:be:52:31:
+                    fa:07:3a:6d:8f:42:c2:92:80:31:5c:ae:cb:15:f0:
+                    72:cf:f6:5c:b9:f2:6b:91:b0:03:48:08:ae:a6:8d:
+                    e4:bd:a1:f6:05:38:1c:70:43:b6:7d:34:b5:c1:b9:
+                    0b:f7:ec:71:0c:a4:20:92:2b:0f:c0:41:80:16:84:
+                    64:98:6d:13:38:df:ce:82:98:8c:ac:97:56:10:6d:
+                    f8:e1:d5:19:ed:b7:60:44:c8:9e:72:61:1f:16:3b:
+                    81:13:a8:c3:99:99:47:ba:81:68:af:2a:39:80:c5:
+                    88:1b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: ecdsa-with-SHA1
+        30:45:02:21:00:b4:35:4d:5d:8b:9c:bd:ea:be:86:13:75:ab:
+        d0:af:cc:fb:39:85:20:0b:2d:a7:84:d7:ce:8f:44:54:b6:6a:
+        7c:02:20:62:49:3e:32:da:e2:fe:bb:f3:db:8d:f6:78:de:0a:
+        46:e3:93:87:1c:e7:b1:6f:81:9e:1d:b2:3b:5e:a2:2c:7b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----