pki library: Add CertIssuerSourceNSS that retrieves intermediate certs from NSS.

net/data/cert_issuer_source_static_unittest/c2.pem

 Generated by ./generate-certs.py.
 Refer to generator script docstring for details.
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=i1
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=C2
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:f4:4c:af:e3:23:18:0e:c6:ce:4e:16:5a:b4:05:
-                    0c:86:5b:f8:0e:1e:78:03:ef:14:72:37:92:22:15:
-                    d5:d4:9b:6c:5d:f3:57:a0:8c:fb:e8:72:ae:c1:75:
-                    32:4d:a2:db:21:b8:a3:9a:08:6d:14:f4:b0:9d:b6:
-                    41:67:a3:45:50:e6:a9:5d:0f:8a:c2:84:b1:28:91:
-                    18:ef:ea:fe:8b:6c:a2:c1:32:3d:11:ac:c3:60:7b:
-                    93:61:f8:be:9c:9d:6b:0d:fb:3d:b7:d2:a0:1d:29:
-                    6e:1d:bc:ce:e9:05:3e:b3:a8:88:13:08:11:4e:61:
-                    22:c7:b8:eb:d4:00:c4:66:99:c6:60:b0:13:d0:c1:
-                    79:7f:1b:86:f2:0d:f4:f7:d4:bb:31:0b:f1:9c:1c:
-                    8d:4a:01:e6:31:53:9d:12:37:f9:ed:b2:01:6a:fb:
-                    b5:07:3e:74:19:a9:61:b7:0a:46:4e:5d:66:80:f0:
-                    dd:0b:e7:ad:18:c4:30:6a:78:60:2a:28:61:16:b1:
-                    86:fd:24:a2:40:60:e8:45:0c:ad:9f:fb:e2:eb:07:
-                    45:34:7b:93:b2:a7:a7:d5:81:8d:89:f5:82:83:05:
-                    6f:c5:71:45:5b:c8:31:88:9c:b4:d4:dc:2e:8a:b7:
-                    08:6e:c8:70:02:35:6f:0f:7f:1c:fa:d7:15:7e:ce:
-                    92:7b
+                    00:dc:0c:20:7f:23:ae:ea:7d:0c:20:23:32:e1:b0:
+                    2d:e0:5d:95:b9:5f:89:95:f9:98:5a:df:96:4d:1d:
+                    66:43:47:15:61:6d:ab:0e:1a:fc:94:46:82:4e:12:
+                    ca:9d:b2:99:78:a1:45:39:4d:6e:6f:5c:ba:c0:62:
+                    ff:93:3e:0d:57:c4:86:4e:0f:fc:7b:7e:01:de:38:
+                    72:fb:f2:7f:e3:60:f8:0d:42:c3:4f:31:24:3f:96:
+                    d1:73:ac:02:87:f6:30:ab:ec:8a:0e:c2:a5:cf:dd:
+                    e7:91:83:8d:9e:2a:e8:c7:26:6f:0d:d1:ef:54:6f:
+                    a3:91:80:bf:87:0f:77:f7:be:fd:6f:e9:a1:3d:42:
+                    15:0c:fa:0e:95:7c:de:a3:5e:f2:28:e3:bc:fd:3f:
+                    27:6d:30:89:e3:51:8a:f4:7f:72:b1:e6:48:12:1e:
+                    02:d8:b2:fe:64:64:4d:65:17:61:18:5f:1a:f8:f0:
+                    eb:88:35:c8:ad:d0:ed:b4:c6:e3:09:3e:e3:ef:8e:
+                    40:a1:c7:f3:46:d5:50:a2:ff:ae:49:a4:52:65:4d:
+                    81:0f:57:ea:92:a6:64:74:90:17:67:82:ca:17:52:
+                    71:5a:d6:85:65:fe:f0:c7:ff:bb:7b:3d:a0:95:af:
+                    4c:64:17:56:7f:fe:b9:01:cd:db:b0:df:08:18:c1:
+                    5f:f3
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                42:9A:C2:7B:BB:94:1E:50:73:FD:C3:7C:D8:C1:CA:7D:78:81:2A:19
+                17:8F:59:67:1C:97:6D:5F:5E:91:F1:28:D2:2F:37:9E:46:0F:A9:8D
             X509v3 Authority Key Identifier: 
-                keyid:F9:72:F0:81:01:06:00:24:81:09:78:86:EB:FF:E1:51:82:0A:A8:44
+                keyid:0C:6A:CE:BB:AC:0D:C3:03:19:28:BF:63:76:72:0B:3D:89:5B:D3:B7
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/i1.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/i1.crl
 
             X509v3 Key Usage: critical
                 Digital Signature, Key Encipherment
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication, TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         2e:4a:94:16:8e:cd:8d:9b:15:98:a1:e2:ba:ef:86:96:df:63:
-         a8:a5:3e:79:b6:c3:e2:6b:58:50:8c:5d:e3:1a:36:cb:82:fe:
-         59:60:a5:58:9b:98:26:49:74:85:db:91:8f:bc:4a:57:c4:c7:
-         33:f0:16:39:54:c4:13:19:03:d8:f9:b0:98:10:e2:7b:93:18:
-         f5:39:26:e4:51:9f:12:c0:00:d2:2f:7b:a4:f6:8d:d4:63:af:
-         23:2f:d5:e6:25:53:43:b5:fa:b4:a9:ae:4c:ce:6d:2b:18:87:
-         27:3a:35:93:53:31:14:a3:2c:6c:84:16:29:93:a2:ae:d9:96:
-         20:e3:49:74:b0:2c:cc:5f:e5:e7:9e:70:b7:f9:ba:dc:45:d8:
-         46:10:df:81:ae:39:a4:52:67:2b:a9:b0:19:fb:30:36:0c:cb:
-         17:9a:a7:af:9a:a3:67:b9:bb:e1:4e:d7:7c:2d:0b:2d:12:6a:
-         9e:2c:3b:b9:ef:6c:9b:28:8d:5d:f0:a2:fa:f4:60:67:3a:72:
-         fd:d1:4c:cb:65:e6:3a:68:12:e2:3d:99:4d:df:78:bb:69:15:
-         92:46:18:94:60:90:0b:83:a4:4d:b7:fa:fe:14:d5:5f:9a:aa:
-         44:ca:d4:fb:d6:b7:04:7f:ac:2c:33:03:d7:38:6b:16:53:c0:
-         db:cf:aa:62
+         7d:cd:21:c8:a9:3b:3e:d0:8c:47:24:c4:13:1a:ed:9b:b6:1d:
+         14:d7:00:9e:5a:6c:6b:c0:6c:48:ab:89:ef:94:09:5b:5b:c3:
+         a3:54:43:62:70:12:b2:32:cd:15:ab:e9:69:af:15:02:63:71:
+         b0:9c:6f:ec:67:c9:e1:37:de:1b:ef:b1:5c:2a:95:39:3c:b5:
+         be:e3:e9:61:81:b5:67:b2:8f:17:8c:20:4b:9b:15:86:d4:0d:
+         3b:00:aa:e7:0c:5a:53:93:73:fa:61:c8:d2:05:7d:22:ef:e4:
+         3c:45:37:8d:5d:be:83:f8:90:75:33:f0:99:b0:60:36:7c:d4:
+         09:fa:23:6a:e5:60:a0:89:94:5d:e9:6d:df:d5:b8:c0:8e:08:
+         3b:20:72:e7:5b:03:84:42:fe:ee:e7:46:63:29:58:c4:9a:9b:
+         8b:d7:bb:2f:9d:20:5e:5b:04:35:52:79:c6:56:63:d6:44:ae:
+         d9:5f:e6:c0:6b:fe:f5:8f:ff:3d:2b:7b:a7:8c:0e:36:02:79:
+         7f:cd:c4:a5:f4:99:ff:cb:ca:8e:77:9e:de:c2:40:22:b5:d3:
+         6d:6c:41:44:ce:b4:21:eb:8c:c3:7f:eb:da:ee:0c:54:9e:5d:
+         2c:04:da:df:86:4e:34:b2:a4:8f:a8:9f:ab:73:1d:66:f8:ae:
+         e8:76:8d:eb
 -----BEGIN CERTIFICATE-----
 MIIDazCCAlOgAwIBAgIBATANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDDAJpMTAe
 Fw0xNTAxMDExMjAwMDBaFw0xNjAxMDExMjAwMDBaMA0xCzAJBgNVBAMMAkMyMIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Eyv4yMYDsbOThZatAUMhlv4
-Dh54A+8UcjeSIhXV1JtsXfNXoIz76HKuwXUyTaLbIbijmghtFPSwnbZBZ6NFUOap
-XQ+KwoSxKJEY7+r+i2yiwTI9EazDYHuTYfi+nJ1rDfs9t9KgHSluHbzO6QU+s6iI
-EwgRTmEix7jr1ADEZpnGYLAT0MF5fxuG8g3099S7MQvxnByNSgHmMVOdEjf57bIB
-avu1Bz50GalhtwpGTl1mgPDdC+etGMQwanhgKihhFrGG/SSiQGDoRQytn/vi6wdF
-NHuTsqen1YGNifWCgwVvxXFFW8gxiJy01NwuircIbshwAjVvD38c+tcVfs6SewID
-AQABo4HVMIHSMB0GA1UdDgQWBBRCmsJ7u5QeUHP9w3zYwcp9eIEqGTAfBgNVHSME
-GDAWgBT5cvCBAQYAJIEJeIbr/+FRggqoRDA1BggrBgEFBQcBAQQpMCcwJQYIKwYB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 BQUHMAKGGWh0dHA6Ly91cmwtZm9yLWFpYS9pMS5jZXIwKgYDVR0fBCMwITAfoB2g
 G4YZaHR0cDovL3VybC1mb3ItY3JsL2kxLmNybDAOBgNVHQ8BAf8EBAMCBaAwHQYD
-VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQAu
-SpQWjs2NmxWYoeK674aW32OopT55tsPia1hQjF3jGjbLgv5ZYKVYm5gmSXSF25GP
-vEpXxMcz8BY5VMQTGQPY+bCYEOJ7kxj1OSbkUZ8SwADSL3uk9o3UY68jL9XmJVND
-tfq0qa5Mzm0rGIcnOjWTUzEUoyxshBYpk6Ku2ZYg40l0sCzMX+XnnnC3+brcRdhG
-EN+BrjmkUmcrqbAZ+zA2DMsXmqevmqNnubvhTtd8LQstEmqeLDu572ybKI1d8KL6
-9GBnOnL90UzLZeY6aBLiPZlN33i7aRWSRhiUYJALg6RNt/r+FNVfmqpEytT71rcE
-f6wsMwPXOGsWU8Dbz6pi
+VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQB9
+zSHIqTs+0IxHJMQTGu2bth0U1wCeWmxrwGxIq4nvlAlbW8OjVENicBKyMs0Vq+lp
+rxUCY3GwnG/sZ8nhN94b77FcKpU5PLW+4+lhgbVnso8XjCBLmxWG1A07AKrnDFpT
+k3P6YcjSBX0i7+Q8RTeNXb6D+JB1M/CZsGA2fNQJ+iNq5WCgiZRd6W3f1bjAjgg7
+IHLnWwOEQv7u50ZjKVjEmpuL17svnSBeWwQ1UnnGVmPWRK7ZX+bAa/71j/89K3un
+jA42Anl/zcSl9Jn/y8qOd57ewkAitdNtbEFEzrQh64zDf+va7gxUnl0sBNrfhk40
+sqSPqJ+rcx1m+K7odo3r
 -----END CERTIFICATE-----