Support trust anchor constraints, by specifying them as a certificate.

components/cast_certificate/cast_cert_validator.cc

Index: components/cast_certificate/cast_cert_validator.cc
diff --git a/components/cast_certificate/cast_cert_validator.cc b/components/cast_certificate/cast_cert_validator.cc
index 3e9bb222a2663bc9fb0fc8a33098d4826faaa013..03bab44e98498f8fe1f7923e0c3af82c10a18aa0 100644
--- a/components/cast_certificate/cast_cert_validator.cc
+++ b/components/cast_certificate/cast_cert_validator.cc
@@ -72,10 +72,8 @@ class CastTrustStore {
             data, N, net::ParsedCertificate::DataSource::EXTERNAL_REFERENCE,
             {});
     CHECK(cert);
-    // TODO(crbug.com/635200): Support anchor constraints, and initialize the
-    // anchor using constraints from the self-signed certificate.
     scoped_refptr<net::TrustAnchor> anchor =
-        net::TrustAnchor::CreateFromCertificateNoConstraints(std::move(cert));
+        net::TrustAnchor::CreateFromCertificateWithConstraints(std::move(cert));
     store_.AddTrustAnchor(std::move(anchor));
   }