Perform CRLSet evaluation during Path Building on NSS

net/data/ssl/certificates/multi-root-E-by-E.pem

 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 4096 (0x1000)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=E Root CA
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=E Root CA - Multi-root
         Validity
             Not Before: Jan  2 00:00:00 2016 GMT
             Not After : Jan  2 00:00:00 2026 GMT
-        Subject: CN=E Root CA
+        Subject: CN=E Root CA - Multi-root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:a4:35:79:08:1a:d9:5a:a6:12:69:98:d6:3f:c7:
-                    fb:31:f6:f1:d6:a4:1b:f3:6a:fb:36:51:04:f1:9d:
-                    3b:94:81:77:35:7d:62:75:b4:b4:04:69:df:44:49:
-                    fc:43:d5:a4:14:af:67:d0:fb:51:21:2b:8b:dc:8c:
-                    89:d1:0b:08:26:17:3d:75:10:08:6f:ba:a4:24:8b:
-                    7e:c3:fa:3d:ab:fb:f6:f5:14:80:f7:9a:45:00:b2:
-                    84:12:e2:7d:c0:b7:40:ca:6f:06:1e:d2:3c:10:6f:
-                    11:f0:52:a2:16:ef:52:91:09:6f:89:28:cf:70:fc:
-                    e7:9e:1c:4b:5d:88:08:2f:2c:9e:75:c6:b9:6b:25:
-                    68:05:01:98:f2:28:53:7d:be:a1:5f:3a:62:0b:4a:
-                    c4:95:17:97:d0:4a:5d:8a:5f:52:07:7a:6a:8b:81:
-                    41:a2:60:08:92:e8:d0:c2:c8:9c:19:b2:3c:c3:c6:
-                    33:7d:5d:90:a6:0b:d3:ca:7b:8b:6f:70:aa:bb:d1:
-                    90:81:6c:db:b8:48:f8:52:d1:47:32:ed:66:9e:67:
-                    dd:e6:bc:9e:5d:60:33:9f:07:d8:b6:3e:d2:48:f5:
-                    a8:4c:12:6f:19:32:32:a7:66:0c:66:00:79:9f:dc:
-                    91:e4:54:bb:ff:b5:22:ad:0c:5f:f7:5d:d6:1a:f0:
-                    82:59
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:b5:60:cb:b4:84:ab:6c:ba:59:52:a9:4c:6a:85:
+                    41:f2:41:17:49:40:3f:3e:e8:70:5c:05:df:dd:64:
+                    9e:fc:be:fb:38:ef:5d:67:ab:0e:de:9c:ea:ad:91:
+                    e1:f4:db:8b:f4:c0:e6:d0:ad:e2:83:15:01:aa:49:
+                    42:97:ae:72:7b:78:e3:20:4e:7e:29:ee:b5:35:6b:
+                    c4:af:d4:54:b0:86:2f:a9:09:a7:3b:8c:05:9e:fd:
+                    b4:b8:1f:3a:aa:d5:b5:d2:91:0f:50:e9:d2:1e:62:
+                    1c:c1:30:07:41:aa:bd:c2:11:3f:cc:c8:0f:a9:7e:
+                    81:69:52:96:86:2a:07:63:7b:f0:23:9e:db:27:88:
+                    8c:dc:aa:8c:66:dd:35:3a:08:60:37:36:41:34:f5:
+                    48:69:23:1a:5b:18:a7:ec:df:68:0a:3c:19:fb:92:
+                    b7:fa:53:9b:f3:70:b6:0d:4c:cb:2f:b7:0e:7e:5f:
+                    94:8c:a3:71:66:09:be:0d:af:db:52:f6:82:3f:88:
+                    64:72:cc:19:79:f4:7b:4d:6e:50:dc:93:88:d5:29:
+                    8a:e1:c8:1f:32:71:9f:d9:0e:14:31:f8:94:11:23:
+                    b1:bf:64:eb:27:3a:64:fb:77:ee:40:8c:a7:03:ed:
+                    1d:ec:8f:ee:25:58:f0:26:91:3c:f8:28:a1:7a:45:
+                    9f:13
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Subject Key Identifier: 
-                B7:51:AA:C9:B7:3E:03:E5:11:94:49:A2:26:0F:70:81:7B:4E:7A:A7
+                51:68:BC:D9:1B:1D:7F:8E:0D:4A:33:39:2D:A4:1F:14:29:92:70:8E
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
     Signature Algorithm: sha256WithRSAEncryption
-        6b:32:6f:7f:a4:6c:9c:21:a9:95:ab:b6:2a:50:59:72:36:1a:
-        ad:86:c4:4e:2f:a2:0a:81:47:b1:37:ed:94:5a:e3:c3:ec:43:
-        46:2b:39:6c:66:ba:61:74:44:a4:e6:f6:63:6c:98:4b:d1:01:
-        74:93:77:81:fe:92:5c:4a:bf:a4:d2:0b:aa:c8:00:7b:df:74:
-        75:6e:d7:1a:7d:3b:f4:07:99:bb:04:63:93:97:9f:1d:b0:f0:
-        81:23:94:70:8b:c6:c1:24:c1:05:01:80:c6:4e:cc:ec:7f:05:
-        c8:93:c4:9b:57:bb:ac:8e:b6:7f:ed:41:e6:49:2d:1b:bb:ec:
-        74:47:ce:63:57:a2:e9:42:b5:f6:73:8d:f5:64:a5:53:f0:86:
-        4b:34:29:80:0b:63:16:c6:98:af:d6:cb:17:52:8e:75:fc:95:
-        03:ca:03:1d:a8:d3:83:f4:32:94:b1:6d:2e:f0:1c:87:81:b5:
-        6a:f0:19:20:76:62:e1:da:39:9c:f7:ee:d3:f7:d3:14:39:89:
-        a2:a9:eb:2f:8e:e6:0f:70:e5:63:d1:43:ff:d8:f0:68:13:55:
-        c5:02:ab:f9:a5:d8:ae:7f:4c:c5:e4:1b:c2:ba:4a:e9:d7:d3:
-        6e:69:80:39:d0:ad:0c:9d:2a:e6:6c:e6:e9:f7:49:eb:4b:4d:
-        73:0d:d5:51
+         2d:d4:56:d9:90:bb:62:64:66:78:6d:cd:73:26:cc:42:ce:37:
+         f4:bf:e8:8f:e7:1e:00:cb:c2:bd:54:33:0b:a8:e2:04:e1:5f:
+         59:2a:1a:41:70:0f:d6:32:5f:d0:14:86:fa:e2:a7:19:29:49:
+         77:56:b9:d7:e6:eb:39:61:e4:25:67:22:eb:f8:46:86:b7:6b:
+         7d:44:01:0b:18:cb:ba:e5:af:76:ab:c6:fe:43:6c:d8:f6:33:
+         f7:86:0b:22:da:27:78:91:07:55:3f:b2:c5:1e:10:88:09:b3:
+         cf:22:c6:7e:8f:c6:d0:c5:ec:67:90:72:8b:2b:c4:46:81:2c:
+         82:d1:5c:57:4e:d5:af:c4:d2:d8:b2:a7:91:1a:42:b3:57:bc:
+         4e:81:5e:cf:91:af:da:f1:53:29:de:31:6b:d3:69:a4:4d:a9:
+         14:15:96:51:7d:0d:bd:28:11:03:71:d2:85:11:92:1d:96:1a:
+         12:33:0c:4b:cf:c4:40:19:fb:eb:6a:fe:9b:e7:2d:cd:f7:75:
+         a3:66:4e:a6:7d:8e:8c:2e:5d:b8:2c:a8:5e:d7:42:1b:97:00:
+         ba:12:41:8c:9b:f1:ed:91:49:63:5a:11:0d:e4:7d:f0:dc:36:
+         23:0b:1b:e8:5f:be:1f:6d:a7:aa:bb:30:76:e2:36:b2:5a:68:
+         80:f5:75:7e
 -----BEGIN CERTIFICATE-----
-MIIC5jCCAc6gAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwFDESMBAGA1UEAwwJRSBS
-b290IENBMB4XDTE2MDEwMjAwMDAwMFoXDTI2MDEwMjAwMDAwMFowFDESMBAGA1UE
-AwwJRSBSb290IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDV5
-CBrZWqYSaZjWP8f7Mfbx1qQb82r7NlEE8Z07lIF3NX1idbS0BGnfREn8Q9WkFK9n
-0PtRISuL3IyJ0QsIJhc9dRAIb7qkJIt+w/o9q/v29RSA95pFALKEEuJ9wLdAym8G
-HtI8EG8R8FKiFu9SkQlviSjPcPznnhxLXYgILyyedca5ayVoBQGY8ihTfb6hXzpi
-C0rElReX0Epdil9SB3pqi4FBomAIkujQwsicGbI8w8YzfV2QpgvTynuLb3Cqu9GQ
-gWzbuEj4UtFHMu1mnmfd5ryeXWAznwfYtj7SSPWoTBJvGTIyp2YMZgB5n9yR5FS7
-/7UirQxf913WGvCCWQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQW
-BBS3UarJtz4D5RGUSaImD3CBe056pzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcN
-AQELBQADggEBAGsyb3+kbJwhqZWrtipQWXI2Gq2GxE4vogqBR7E37ZRa48PsQ0Yr
-OWxmumF0RKTm9mNsmEvRAXSTd4H+klxKv6TSC6rIAHvfdHVu1xp9O/QHmbsEY5OX
-nx2w8IEjlHCLxsEkwQUBgMZOzOx/BciTxJtXu6yOtn/tQeZJLRu77HRHzmNXoulC
-tfZzjfVkpVPwhks0KYALYxbGmK/WyxdSjnX8lQPKAx2o04P0MpSxbS7wHIeBtWrw
-GSB2YuHaOZz37tP30xQ5iaKp6y+O5g9w5WPRQ//Y8GgTVcUCq/ml2K5/TMXkG8K6
-SunX025pgDnQrQydKuZs5un3SetLTXMN1VE=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 -----END CERTIFICATE-----