Consider the verification time as well as the expiration time when caching certificate verification…

net/base/host_cache.h

Index: net/base/host_cache.h
diff --git a/net/base/host_cache.h b/net/base/host_cache.h
index a47a4ffbd6847e65570610708a61dfde9af3da66..6f0e17dab5938fd6d4a9fa9807fd9da2a9b7b23a 100644
--- a/net/base/host_cache.h
+++ b/net/base/host_cache.h
@@ -6,6 +6,7 @@
 #define NET_BASE_HOST_CACHE_H_
 #pragma once
 
+#include <functional>
 #include <string>
 
 #include "base/gtest_prod_util.h"
@@ -54,7 +55,8 @@ class NET_EXPORT HostCache : NON_EXPORTED_BASE(public base::NonThreadSafe) {
     HostResolverFlags host_resolver_flags;
   };
 
-  typedef ExpiringCache<Key, Entry> EntryMap;
+  typedef ExpiringCache<Key, Entry, base::TimeTicks,
+                        std::less<base::TimeTicks> > EntryMap;
 
   // Constructs a HostCache that stores up to |max_entries|.
   explicit HostCache(size_t max_entries);