Reject certificates that are valid for too long.

net/data/ssl/certificates/11_year_validity.pem

Index: net/data/ssl/certificates/11_year_validity.pem
diff --git a/net/data/ssl/certificates/11_year_validity.pem b/net/data/ssl/certificates/11_year_validity.pem
new file mode 100644
index 0000000000000000000000000000000000000000..742da095fbce29b66ad0b74641a5a3c1e06a7e23
--- /dev/null
+++ b/net/data/ssl/certificates/11_year_validity.pem
@@ -0,0 +1,81 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 5 (0x5)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Oct 30 00:00:00 2014 GMT
+            Not After : Oct 27 19:26:19 2025 GMT
+        Subject: CN=xn--wgv71a119e.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bc:20:51:b0:06:00:cb:4d:f0:82:41:9e:a7:df:
+                    e0:15:cf:bc:e5:4b:13:5c:19:51:9d:6c:18:9b:e6:
+                    77:4e:94:01:64:41:57:33:0d:9b:67:23:2d:8c:22:
+                    3f:c2:a1:db:d0:ec:20:af:88:95:29:62:0c:74:76:
+                    fc:5b:26:d6:6d:f7:36:cf:b2:ed:64:5d:cc:c0:f6:
+                    54:3a:c3:89:b1:2a:6f:28:c9:11:05:74:f4:3e:bc:
+                    1f:e2:e6:04:ab:ad:8f:59:05:f2:03:3d:8e:fb:0c:
+                    9d:18:c1:12:f8:60:98:b3:e2:a5:ba:00:59:e5:e4:
+                    19:a1:d9:3b:b1:0a:77:10:e2:72:90:0e:93:50:d8:
+                    b2:f9:39:4b:14:80:4a:18:93:c8:d7:fb:b3:32:0c:
+                    af:c7:f3:d1:d5:48:87:9f:8f:ef:ff:8c:13:61:a5:
+                    17:32:9d:63:91:c6:93:e9:7c:66:ad:27:b7:9a:fa:
+                    49:b8:4c:68:c6:ff:18:94:62:4a:f5:03:e4:20:5a:
+                    7b:96:fd:d6:76:a7:73:9a:e6:ac:1e:9c:83:de:5c:
+                    ce:7d:67:2d:71:ad:33:fc:7e:ba:4a:1d:15:22:32:
+                    05:9c:65:c5:9d:fa:a5:16:9e:d2:85:fc:c7:a1:cb:
+                    ca:84:d2:bb:8d:11:7b:c3:0c:5f:e5:25:c3:4c:a2:
+                    cb:cb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                C1:6A:E8:21:0E:C3:F4:D7:73:21:43:E3:B1:FA:65:2C:6F:2D:46:01
+            X509v3 Authority Key Identifier: 
+                keyid:CC:56:4D:CF:92:F0:A5:B8:36:08:B0:46:B5:84:E2:4A:00:56:20:57
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         d0:30:42:a6:35:ce:60:1c:10:56:d0:de:14:d2:8e:6b:97:4b:
+         0c:bc:5b:a0:ad:95:99:c1:a3:0b:61:06:e2:7b:7d:4f:94:09:
+         f1:d6:ca:2f:c9:c6:b3:96:4c:3e:0b:be:15:b2:1d:85:7c:f7:
+         c4:02:33:e5:c5:1b:99:c5:24:a6:34:e1:19:53:ff:7e:5b:0c:
+         be:cf:b7:32:86:6c:91:8a:ee:db:8e:ad:44:cf:d7:bc:97:a3:
+         ff:aa:d0:73:52:21:63:e1:7e:1e:06:58:c1:ac:76:ee:67:a8:
+         37:bd:a6:51:3d:53:ec:f5:a9:a3:e0:b1:3b:d3:7e:f7:2d:4e:
+         91:b0:77:a5:40:47:98:d9:04:66:83:71:dd:6f:91:f4:e7:6e:
+         f4:3c:89:a9:65:51:82:ac:43:f0:c0:e7:cf:4f:17:40:dd:10:
+         22:d7:e1:37:2d:44:31:d0:d7:d6:73:9f:83:ce:69:bd:50:0e:
+         e3:12:e4:21:84:da:ca:e0:10:5e:7c:4d:48:d4:72:49:d9:cd:
+         35:d3:34:92:d0:4c:a6:33:cc:a5:a4:a0:03:fe:0f:37:1b:f6:
+         59:aa:8d:c1:3a:0d:b7:f0:dc:d9:0d:b4:a8:8a:eb:d3:b1:e4:
+         d0:56:bf:99:6a:f4:a1:09:ff:6e:fd:c0:78:02:03:51:54:ee:
+         3a:a7:5e:3f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----