Make Cast certificate verification enforce constraints specified in the trusted root certificate.

net/cert/internal/parse_certificate.h

Index: net/cert/internal/parse_certificate.h
diff --git a/net/cert/internal/parse_certificate.h b/net/cert/internal/parse_certificate.h
index eca692dd044ad3de7adc654956ed0d9edd3179b4..d48c07cb049dbc03108c38d0dedd3a58d3388a96 100644
--- a/net/cert/internal/parse_certificate.h
+++ b/net/cert/internal/parse_certificate.h
@@ -112,6 +112,9 @@ enum class CertificateVersion {
 // ParsedCertificate is expected to be filled by ParseCertificate(), so
 // subsequent field descriptions are in terms of what ParseCertificate() sets.
 struct NET_EXPORT ParsedCertificate {
+  ParsedCertificate();
+  ~ParsedCertificate();
+
   // Corresponds with "tbsCertificate" from RFC 5280:
   //         tbsCertificate       TBSCertificate,
   //