Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-768-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,59 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=768 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 12 22:47:53 2011 GMT
+            Not After : Dec  9 22:47:53 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:f1:de:da:de:0d:99:88:05:1e:96:f3:3c:4d:11:
+                    1e:c6:b4:47:9a:ff:74:4c:ba:ae:2b:8d:30:e7:d5:
+                    15:e2:08:70:58:33:51:44:03:cb:c4:9c:67:dd:24:
+                    65:51:10:f8:a7:f2:8a:38:d7:82:99:2c:04:98:da:
+                    48:d6:2b:b7:dd:1f:af:7f:26:d1:19:67:10:36:54:
+                    a0:fe:f2:7c:17:40:d9:18:2e:cf:82:ef:d6:c8:c5:
+                    5c:1f:ca:6c:34:f8:7f:2c:f1:a2:8e:5e:81:53:b6:
+                    54:98:b6:90:50:60:96:fd:82:20:fb:4c:25:5b:61:
+                    52:dc:af:55:6c:55:f6:46:b0:33:b6:65:4f:0a:ff:
+                    94:6c:c8:27:0a:bb:cd:44:f2:45:ff:a1:ba:56:c3:
+                    d9:a6:ad:64:fc:ab:95:28:6e:a8:80:1b:66:37:44:
+                    71:1e:6f:1f:5c:32:bd:c6:d1:97:ce:08:1a:15:fc:
+                    a8:20:e3:cd:2a:5f:b4:49:7f:aa:2f:36:f1:3e:45:
+                    33:80:63:38:a6:b2:c5:35:2a:5c:58:a2:19:e0:6a:
+                    43:50:77:0b:7a:a2:2e:29:5e:c0:7d:32:f4:94:bd:
+                    7d:40:b0:95:d2:35:a8:98:88:a2:68:4a:f2:c8:45:
+                    ab:9b:04:24:7b:d3:47:7a:e0:5d:d9:b6:aa:da:4e:
+                    3e:7b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        7b:3d:57:0d:58:2c:23:2a:24:b8:35:ee:0a:05:fb:39:fe:77:
+        4a:38:17:63:72:ea:1c:6f:f6:2e:a8:3c:11:c3:0f:fb:f5:e1:
+        e5:ce:64:7f:63:e5:99:e0:dc:39:90:a4:4c:ca:4f:ad:39:ba:
+        e6:eb:89:e9:78:43:50:6d:c6:99:6f:ea:50:76:83:32:da:50:
+        7b:55:f0:a5:73:f8:69:25:9e:89:0d:1d:fd:b7:1e:19:96:40:
+        ae:ff:9b:cc:7b:16
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----