Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/README

Index: net/data/ssl/certificates/README
===================================================================
--- net/data/ssl/certificates/README	(revision 114571)
+++ net/data/ssl/certificates/README	(working copy)
@@ -76,3 +76,12 @@
 - unescaped.pem : Regression test for http://crbug.com/102839. Contains
      characters such as '=' and '"' that would normally be escaped when
      converting a subject/issuer name to their stringized form.
+
+- 2048-rsa-root.pem
+- {768-rsa,1024-rsa,2048-rsa,prime256v1-ecdsa}-intermediate.pem
+- {768-rsa,1024-rsa,2048-rsa,prime256v1-ecdsa}-ee-by-
+      {768-rsa,1024-rsa,2048-rsa,prime256v1-ecdsa}-intermediate.pem
+     These certficates are generated by
+     net/data/ssl/scripts/generate-weak-test-chains.sh and used in the
+     RejectWeakKeys test in net/base/x509_certificate_unittest.cc.
+