Perform CRLSet evaluation during Path Building on NSS

net/data/ssl/certificates/multi-root-D-by-D.pem

 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 4096 (0x1000)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=D Root CA
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=D Root CA - Multi-root
         Validity
             Not Before: Jan  2 00:00:00 2016 GMT
             Not After : Jan  2 00:00:00 2026 GMT
-        Subject: CN=D Root CA
+        Subject: CN=D Root CA - Multi-root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:e4:63:48:86:4d:1f:34:4d:c9:b2:f3:14:af:d3:
-                    ec:68:bd:ac:b6:ac:e4:11:fd:81:d3:4c:7c:dd:03:
-                    d7:4e:44:30:9d:53:7a:4d:cf:25:29:ef:b5:f5:83:
-                    b3:30:10:3b:97:f2:63:8c:40:41:fd:18:88:81:c5:
-                    53:26:90:f7:77:b1:01:5f:d7:7a:04:73:85:9a:b3:
-                    e8:6e:40:7b:6a:2b:1c:b4:0f:52:83:ad:08:cb:58:
-                    c2:71:87:85:b3:81:8c:21:88:aa:d5:4f:0b:84:c8:
-                    52:b0:cf:c4:cf:c7:72:8f:6a:2f:07:a2:2b:33:3d:
-                    6c:aa:00:1f:ef:c9:61:f6:58:8d:3a:8f:23:6b:75:
-                    a0:cf:86:9d:02:0f:ca:2b:d2:75:f3:b6:fe:14:26:
-                    31:d4:31:28:e4:d1:cf:f7:4d:12:58:d8:ac:f8:d3:
-                    f2:ae:d6:6e:72:dc:07:b8:d2:f2:76:0d:bf:a3:c1:
-                    18:63:58:55:84:4f:a5:82:d3:8f:17:8d:e1:0f:5a:
-                    9e:7f:69:01:4c:da:90:a1:33:b2:36:4f:91:3d:1f:
-                    0b:ea:8c:0d:ca:ff:e7:d1:0c:e0:ce:5b:54:6a:b9:
-                    ed:46:38:8c:80:d4:24:9c:71:48:23:80:61:b8:71:
-                    d4:8f:0d:96:b2:c1:f0:29:fc:c7:dd:9d:87:7a:f4:
-                    16:0d
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cd:cf:d9:70:03:4f:4f:f1:9f:93:a1:2c:6e:cb:
+                    2f:20:d7:67:29:ce:99:02:4e:db:7d:6b:5e:6a:3a:
+                    a1:d2:7f:cd:f9:58:bd:34:fe:af:8d:8a:05:34:a2:
+                    67:16:ae:94:88:3b:77:3f:f2:a0:a5:46:2e:05:2e:
+                    b8:a7:2f:ff:e0:df:1d:b8:1e:31:6f:57:f9:aa:55:
+                    9c:83:aa:04:94:cd:e4:0f:99:f4:74:c1:38:8d:4c:
+                    90:67:ba:7e:92:42:59:ff:14:d6:4e:22:31:78:04:
+                    89:63:7d:84:fa:60:e7:d2:0d:61:0b:d8:a5:20:b3:
+                    8a:ce:f1:ef:b7:b0:b5:a6:81:d0:47:50:fb:5a:09:
+                    34:e1:a0:e3:6b:cf:e8:26:38:4d:cb:70:ae:4c:96:
+                    2c:9e:46:18:0c:e3:11:9f:8d:8a:65:c5:b1:03:5c:
+                    61:d9:35:a8:5d:29:08:7c:45:2e:38:13:dc:b0:72:
+                    a6:e6:29:04:85:6a:6d:fd:74:af:60:6c:24:51:e2:
+                    3a:58:38:c1:0f:b2:4e:ac:8e:63:81:36:01:9f:02:
+                    04:de:54:53:4c:fa:5f:67:44:db:f0:ed:ce:3f:f0:
+                    5b:e7:75:b3:72:d5:e8:76:9c:24:73:2b:0c:d9:7c:
+                    dd:85:a8:61:b9:42:d1:69:35:04:88:03:8a:c2:aa:
+                    10:cb
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Subject Key Identifier: 
-                B4:73:D6:1A:33:13:BC:9C:23:5D:F6:4B:A2:29:BD:F8:DC:73:49:11
+                FA:45:82:63:D1:67:F2:93:F4:6A:6B:44:44:74:1A:D2:B0:CD:12:F6
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
     Signature Algorithm: sha256WithRSAEncryption
-        6d:f2:9a:c2:eb:36:2b:45:ad:58:b5:59:68:e9:64:ad:75:18:
-        c0:73:b3:42:a4:ff:c3:25:02:f6:91:9b:a4:4d:0d:3d:49:3e:
-        d2:6b:c5:75:89:48:7b:fa:34:40:4d:06:4e:a6:cf:c5:3c:d5:
-        c2:a8:0e:77:2e:66:f1:fb:28:80:15:06:68:cb:9e:8e:27:1b:
-        22:02:9f:c2:6b:fc:48:b0:20:25:4b:32:6a:db:99:53:89:4e:
-        86:b7:a7:48:ed:1a:3a:f3:87:54:c6:e8:59:a3:95:49:31:39:
-        01:54:56:ee:a8:6a:ba:f2:34:30:e1:75:84:1a:a6:4e:14:e0:
-        25:58:8a:88:dc:2a:58:1e:22:c6:00:62:57:6d:d8:c3:2e:a6:
-        19:05:8f:b9:b9:f3:e9:3e:39:4f:0a:1a:cc:59:ca:b6:89:29:
-        59:b3:ad:92:86:8f:c0:ba:7d:7f:55:27:c6:db:aa:b0:0c:45:
-        73:cc:18:6e:4d:0e:16:61:ad:d9:96:b6:d5:3e:29:e1:59:8c:
-        4e:c9:6c:7a:63:0b:9b:37:0d:d6:31:bf:8c:90:33:97:60:f5:
-        3b:24:1a:ad:eb:d0:8b:3c:0f:1c:0a:52:4b:83:ec:35:96:c6:
-        bb:67:3b:d7:19:78:dc:49:25:c8:b2:44:f5:26:e7:5d:35:4f:
-        6a:bd:00:0f
+         ac:1c:7c:de:1a:4a:31:54:77:c5:94:7d:6a:0b:9d:c2:c9:d4:
+         3b:2d:71:e4:99:df:ca:02:5c:a0:1c:1c:22:7d:f2:a5:0e:97:
+         7c:91:20:12:c5:b7:f5:56:15:8c:1b:44:b2:32:94:8b:e5:b1:
+         c0:0b:f6:c0:b8:b4:cf:b9:27:d8:49:52:fc:81:9f:48:2a:08:
+         b8:94:a1:3f:78:fe:20:66:f5:ed:3f:61:f6:f7:23:5c:4c:36:
+         49:48:10:07:de:40:62:eb:3b:bb:6b:4b:8e:e4:a7:b3:75:33:
+         2f:4d:11:58:76:1e:1c:d9:b9:dc:1c:33:da:82:2b:5f:fc:51:
+         f1:26:35:7d:5e:eb:67:ba:da:2c:f2:d7:6e:88:b6:a1:34:ed:
+         07:d2:a5:e4:ac:d6:9b:7c:6c:6e:77:aa:11:4e:d0:60:fa:86:
+         94:a0:74:00:60:8b:1c:0b:3e:5d:05:c9:b9:8c:b4:6f:a5:e7:
+         82:c0:6a:ef:60:73:de:1f:74:20:aa:67:c7:d9:c2:81:c7:4c:
+         d7:c9:57:e4:7d:db:80:bd:7d:4f:39:a4:77:d3:2e:65:79:87:
+         ae:05:f7:9c:28:ed:e8:4e:f6:ac:38:3f:8f:36:bb:ae:5e:42:
+         71:d5:a9:5b:a7:df:42:9f:6b:e0:ec:3e:3b:6e:36:11:9b:34:
+         a8:66:ff:d5
 -----BEGIN CERTIFICATE-----
-MIIC5jCCAc6gAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwFDESMBAGA1UEAwwJRCBS
-b290IENBMB4XDTE2MDEwMjAwMDAwMFoXDTI2MDEwMjAwMDAwMFowFDESMBAGA1UE
-AwwJRCBSb290IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GNI
-hk0fNE3JsvMUr9PsaL2stqzkEf2B00x83QPXTkQwnVN6Tc8lKe+19YOzMBA7l/Jj
-jEBB/RiIgcVTJpD3d7EBX9d6BHOFmrPobkB7aisctA9Sg60Iy1jCcYeFs4GMIYiq
-1U8LhMhSsM/Ez8dyj2ovB6IrMz1sqgAf78lh9liNOo8ja3Wgz4adAg/KK9J187b+
-FCYx1DEo5NHP900SWNis+NPyrtZuctwHuNLydg2/o8EYY1hVhE+lgtOPF43hD1qe
-f2kBTNqQoTOyNk+RPR8L6owNyv/n0QzgzltUarntRjiMgNQknHFII4BhuHHUjw2W
-ssHwKfzH3Z2HevQWDQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
-BBS0c9YaMxO8nCNd9kuiKb343HNJETAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcN
-AQELBQADggEBAG3ymsLrNitFrVi1WWjpZK11GMBzs0Kk/8MlAvaRm6RNDT1JPtJr
-xXWJSHv6NEBNBk6mz8U81cKoDncuZvH7KIAVBmjLno4nGyICn8Jr/EiwICVLMmrb
-mVOJToa3p0jtGjrzh1TG6FmjlUkxOQFUVu6oarryNDDhdYQapk4U4CVYiojcKlge
-IsYAYldt2MMuphkFj7m58+k+OU8KGsxZyraJKVmzrZKGj8C6fX9VJ8bbqrAMRXPM
-GG5NDhZhrdmWttU+KeFZjE7JbHpjC5s3DdYxv4yQM5dg9TskGq3r0Is8DxwKUkuD
-7DWWxrtnO9cZeNxJJciyRPUm5101T2q9AA8=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 -----END CERTIFICATE-----