Reject certificates that are valid for too long.

net/data/ssl/certificates/br-compliant-validity.pem

Index: net/data/ssl/certificates/br-compliant-validity.pem
diff --git a/net/data/ssl/certificates/br-compliant-validity.pem b/net/data/ssl/certificates/br-compliant-validity.pem
new file mode 100644
index 0000000000000000000000000000000000000000..16eef70ace13e16a39f4100ef924dc373a6d49f7
--- /dev/null
+++ b/net/data/ssl/certificates/br-compliant-validity.pem
@@ -0,0 +1,69 @@
+Certificate:
+     Data:
+         Version: 1 (0x0)
+         Serial Number: 15683600662364022135 (0xd9a757b50749e577)
+     Signature Algorithm: sha1WithRSAEncryption
+         Issuer: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+         Validity
+             Not Before: Aug 21 22:09:02 2013 GMT
+             Not After : May 17 22:09:02 2016 GMT
+         Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+         Subject Public Key Info:
+             Public Key Algorithm: rsaEncryption
+                 Public-Key: (2048 bit)
+                 Modulus:
+                     00:bc:c0:7a:ec:4a:a8:ab:ff:11:76:97:df:1f:d2:
+                     78:c4:3c:06:55:d0:8a:6c:64:18:78:e3:32:c9:0e:
+                     45:bd:d8:1d:a4:21:08:96:78:33:f1:c0:8f:2b:12:
+                     58:d4:87:43:59:54:ef:b3:38:0a:29:01:2d:f7:5a:
+                     a7:ec:15:ab:b6:62:ce:28:5e:35:fa:85:51:5d:84:
+                     82:2c:df:b6:89:3c:af:aa:e3:75:4e:a0:7a:5f:19:
+                     94:7b:07:0e:77:c2:3d:c1:f7:04:28:ad:cb:15:09:
+                     d9:d2:aa:02:b5:88:f7:c5:9e:9e:14:73:29:91:00:
+                     7e:90:2c:4b:74:cd:ad:04:4a:56:83:d5:ae:dc:28:
+                     b5:a3:b5:e9:bc:12:ee:cf:d5:ae:bc:1d:66:f0:50:
+                     df:cc:f2:88:ef:8e:61:41:c1:6c:16:00:44:ed:cf:
+                     4a:7b:06:7e:b1:a5:e0:8b:20:4a:6a:ad:4b:d5:2c:
+                     c1:cd:a5:32:fa:7d:20:c2:c9:0a:43:61:b8:10:04:
+                     1a:f7:f7:1b:0d:99:3b:18:21:47:a6:22:91:cd:96:
+                     7b:79:ab:46:71:e2:74:0a:25:7e:75:b6:bd:24:f7:
+                     21:2c:26:4d:cd:0d:22:72:80:8d:4b:50:a1:65:57:
+                     45:ef:c7:1b:a6:03:12:2e:6d:39:23:52:21:fb:d1:
+                     81:87
+                 Exponent: 65537 (0x10001)
+     Signature Algorithm: sha1WithRSAEncryption
+          6c:c3:23:55:47:23:e2:92:cd:a5:47:97:32:e6:1c:0b:8f:b9:
+          15:e8:f0:ba:91:7e:45:b8:c2:71:ac:0a:33:20:03:cc:f6:de:
+          68:c0:f7:fd:1d:39:07:e9:01:69:47:7e:f7:60:87:e5:04:84:
+          a3:4c:d5:11:b4:1d:8a:e4:fe:06:d4:a7:2d:4b:fc:5a:fc:3a:
+          12:21:fb:24:fa:ad:26:ec:bb:80:13:c0:f2:90:a0:02:ea:dc:
+          0e:01:1e:ce:ce:82:bd:14:a1:52:a9:b2:5f:0d:89:c5:20:21:
+          d1:c1:66:7f:cd:bd:49:8d:df:74:57:69:6a:20:26:5a:a9:e6:
+          25:bd:f6:29:31:0c:7e:40:ae:2a:07:db:ff:dc:d0:30:17:e8:
+          fa:11:89:c6:f7:5b:3f:d8:19:12:f0:e8:f9:67:9c:96:26:e7:
+          65:2f:c9:88:94:48:48:f4:6b:16:f9:ae:19:5e:f6:8f:8f:b2:
+          29:0b:98:73:a0:8c:35:24:77:c4:03:7e:a8:f5:8f:29:cc:4c:
+          f3:95:a2:9c:80:a0:47:67:38:82:ef:f8:b2:a0:eb:8a:7d:20:
+          78:cd:d9:6f:7a:3d:84:4b:80:7a:dd:65:2e:58:95:69:6e:57:
+          a6:ac:ed:fb:14:35:ef:26:9b:c5:82:1b:32:ec:11:c0:19:54:
+          62:39:d3:81
+ -----BEGIN CERTIFICATE-----
+ MIIDPDCCAiQCCQDZp1e1B0nldzANBgkqhkiG9w0BAQUFADBgMQswCQYDVQQGEwJV
+ UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4gVmlldzEQ
+ MA4GA1UECgwHVGVzdCBDQTESMBAGA1UEAwwJMTI3LjAuMC4xMB4XDTEzMDgyMTIy
+ MDkwMloXDTE2MDUxNzIyMDkwMlowYDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh
+ bGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxEDAOBgNVBAoMB1Rlc3Qg
+ Q0ExEjAQBgNVBAMMCTEyNy4wLjAuMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
+ AQoCggEBALzAeuxKqKv/EXaX3x/SeMQ8BlXQimxkGHjjMskORb3YHaQhCJZ4M/HA
+ jysSWNSHQ1lU77M4CikBLfdap+wVq7ZiziheNfqFUV2Egizftok8r6rjdU6gel8Z
+ lHsHDnfCPcH3BCityxUJ2dKqArWI98WenhRzKZEAfpAsS3TNrQRKVoPVrtwotaO1
+ 6bwS7s/VrrwdZvBQ38zyiO+OYUHBbBYARO3PSnsGfrGl4IsgSmqtS9Uswc2lMvp9
+ IMLJCkNhuBAEGvf3Gw2ZOxghR6Yikc2We3mrRnHidAolfnW2vST3ISwmTc0NInKA
+ jUtQoWVXRe/HG6YDEi5tOSNSIfvRgYcCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEA
+ bMMjVUcj4pLNpUeXMuYcC4+5FejwupF+RbjCcawKMyADzPbeaMD3/R05B+kBaUd+
+ 92CH5QSEo0zVEbQdiuT+BtSnLUv8Wvw6EiH7JPqtJuy7gBPA8pCgAurcDgEezs6C
+ vRShUqmyXw2JxSAh0cFmf829SY3fdFdpaiAmWqnmJb32KTEMfkCuKgfb/9zQMBfo
+ +hGJxvdbP9gZEvDo+WeclibnZS/JiJRISPRrFvmuGV72j4+yKQuYc6CMNSR3xAN+
+ qPWPKcxM85WinICgR2c4gu/4sqDrin0geM3Zb3o9hEuAet1lLliVaW5Xpqzt+xQ1
+ 7yabxYIbMuwRwBlUYjnTgQ==
+ -----END CERTIFICATE-----