Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem

Index: net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/2048-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,71 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 238 (0xee)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 12 22:47:54 2011 GMT
+            Not After : Dec  9 22:47:54 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:9f:da:64:07:a7:c4:a4:31:eb:21:18:56:5f:8d:
+                    bb:f1:ac:dd:2b:a1:45:e9:42:e1:a3:5c:6a:91:a4:
+                    f1:78:ac:e9:c1:0a:c3:87:59:5a:51:f5:04:47:73:
+                    5b:f8:47:b5:ab:81:d5:30:7e:13:e7:67:be:fa:14:
+                    33:79:49:92:2a:fc:ec:61:3e:38:74:64:d5:e6:1b:
+                    53:51:5f:56:a4:c2:d3:57:13:0d:e1:c0:66:f8:49:
+                    eb:bb:e5:8e:4c:dc:b1:38:57:84:05:f4:a8:6c:e2:
+                    51:1c:10:3f:d5:9d:ec:d5:db:b9:7d:0b:fc:b9:19:
+                    07:28:ed:63:98:33:d1:7b:eb:59:2e:9e:16:ff:2d:
+                    aa:cf:8e:0e:2d:9c:5c:40:7c:6b:1a:9a:0a:5a:15:
+                    02:d2:f1:93:c6:89:79:dd:93:e8:0b:01:7f:95:f3:
+                    23:78:9c:69:77:ae:27:a9:67:4f:03:91:13:6f:01:
+                    7f:e9:8f:f8:d9:44:be:e4:c2:e7:b1:06:47:05:0e:
+                    13:98:48:a3:45:6f:ff:c5:17:1d:2c:cb:7f:c8:a2:
+                    5d:6b:53:e3:9b:45:81:5a:b6:43:49:1c:1f:07:b5:
+                    69:30:52:64:73:d7:3c:e7:48:df:12:db:a5:17:35:
+                    0d:45:44:0b:68:f4:52:8d:b1:5a:d7:b5:9a:ce:8d:
+                    8e:cf
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        08:ef:7a:ce:d2:0b:a8:1e:34:a2:d5:ee:b0:7a:b4:b4:fc:ba:
+        76:3b:f4:92:21:42:80:85:49:1f:b1:dd:77:45:85:97:5d:22:
+        a8:c9:e3:d9:54:a2:df:57:ae:e9:a0:fb:1a:bd:69:9b:dd:df:
+        58:8a:38:c8:59:92:9c:f3:31:d0:23:5c:cb:e8:7a:c2:8b:60:
+        31:bd:9c:51:05:92:30:13:43:c9:f1:51:54:21:61:e5:3a:8d:
+        4f:d2:2d:93:5c:dc:ed:51:30:6a:6f:30:0f:21:09:45:e2:34:
+        03:c7:d0:78:83:d6:78:72:fc:6d:37:2f:e1:ca:25:df:18:79:
+        99:c0:5e:b7:a3:ec:a6:b3:08:e6:9a:00:2c:a7:4d:01:20:d5:
+        f1:7f:62:fe:e2:33:5e:60:6a:87:0c:df:24:83:67:99:e1:dc:
+        eb:e3:59:12:15:1c:a8:dc:99:4c:fe:b6:99:37:a1:b0:90:b4:
+        c7:ff:0f:70:99:f9:94:c8:f1:fc:bf:45:fd:d5:98:1e:b6:4f:
+        14:7e:1a:c6:f0:d2:26:1e:d7:d3:ed:45:23:6e:19:68:4c:2d:
+        cb:23:d6:9b:bd:47:eb:5b:64:14:c6:13:0a:5d:99:6d:d2:5f:
+        17:dc:f2:d9:5b:f5:ad:2f:41:f0:3a:4c:ee:e1:86:d9:f3:57:
+        d9:0c:34:4c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----