pki library: Add CertIssuerSourceNSS that retrieves intermediate certs from NSS.

net/data/cert_issuer_source_static_unittest/i1_1.pem

 Generated by ./generate-certs.py.
 Refer to generator script docstring for details.
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 2 (0x2)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=I1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c8:26:47:62:ee:66:2d:a6:8d:90:4f:5d:60:4e:
-                    5c:fb:c4:54:22:7c:07:d6:af:57:f2:d5:cb:00:24:
-                    2a:6b:0c:76:e3:90:14:fe:d0:0b:74:fa:3a:a2:33:
-                    c9:b3:1f:9f:d5:69:7c:7c:51:56:8f:e9:48:e7:ac:
-                    c0:76:72:a4:1d:93:0d:c3:b4:ed:99:2d:5a:70:31:
-                    e9:83:a1:58:05:6e:50:c0:2e:5d:d9:e2:97:a6:ef:
-                    08:e1:21:1c:a6:18:74:23:85:e0:0f:b7:85:b7:3c:
-                    e8:a2:ab:09:40:91:b4:21:51:2b:20:be:96:a8:eb:
-                    e9:2e:a1:0e:10:bd:bf:35:90:c8:02:7f:08:c1:1c:
-                    6c:2c:71:98:79:5c:78:83:2c:96:6b:f0:fe:85:bd:
-                    f9:11:6a:8b:86:2f:73:64:e2:94:31:cc:bc:35:65:
-                    bd:43:42:7a:fa:12:a4:71:af:7f:2f:49:28:e9:07:
-                    04:d2:d2:0b:7f:83:b8:80:20:b0:1e:b7:7f:c2:24:
-                    13:b9:04:92:35:00:77:3a:86:8f:be:1a:88:79:7c:
-                    3c:0f:b2:62:21:8d:1c:04:22:7f:ff:e0:c4:6f:98:
-                    68:72:d6:02:97:72:19:71:4b:5d:b3:90:4e:b3:71:
-                    68:58:9d:ff:53:f0:e3:5d:4c:01:1f:18:2f:d7:d0:
-                    72:6f
+                    00:c1:66:fe:2a:a6:f6:54:97:b6:f0:ef:43:4a:a0:
+                    36:e7:70:2b:85:77:7c:e9:b9:2e:e0:d7:cc:43:b7:
+                    43:bb:30:f7:c4:f0:f7:57:44:38:a3:1b:d0:e0:bb:
+                    64:16:72:9d:7f:69:98:b5:2a:f9:49:c5:35:7b:46:
+                    f4:d8:24:36:b7:56:24:fe:ab:9a:81:1e:eb:9e:18:
+                    5a:c2:73:fc:06:66:0d:25:4b:c8:04:bd:33:c0:cf:
+                    cc:ca:a4:e6:95:10:a6:a7:82:24:ba:36:b4:f5:25:
+                    2c:db:d4:04:78:20:00:40:42:06:54:0c:fc:4c:c8:
+                    72:00:a4:e5:46:d2:3f:32:93:c4:75:d4:62:c7:c3:
+                    08:3d:da:eb:aa:bb:5b:54:14:08:b3:57:d5:cb:40:
+                    37:de:0a:77:4b:5d:88:95:d5:1e:b3:d3:07:48:8f:
+                    41:16:b6:78:4f:b5:8d:cd:74:9d:db:60:a6:95:c4:
+                    ba:f8:3b:59:87:c9:5c:3b:75:69:3d:bb:d8:5c:39:
+                    33:f1:d0:0c:dd:9c:5b:d3:70:e4:85:e3:20:81:86:
+                    dc:93:39:ef:4a:3b:3c:ff:be:12:c8:20:2b:2f:a3:
+                    3f:d3:5c:03:8c:82:f6:b9:94:27:a3:ff:d1:63:58:
+                    86:49:5f:f4:27:39:56:35:04:ee:df:a5:78:7b:7c:
+                    b1:cf
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                6C:0B:63:35:AC:38:8B:C1:0C:F8:E5:53:88:09:6A:97:76:E9:EA:AB
+                84:17:CE:FE:EA:88:CB:E4:D7:19:40:7A:01:E3:62:84:3D:C6:05:EB
             X509v3 Authority Key Identifier: 
-                keyid:3D:DD:2C:00:BE:89:E0:43:4C:05:77:67:07:60:FC:AC:BE:48:D0:A4
+                keyid:B5:C3:65:5F:95:6A:F7:19:30:E3:80:DD:EF:B0:A4:1B:3D:BE:A6:9D
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         14:7a:f9:23:d9:15:da:95:72:31:67:ce:27:2f:a0:ba:5e:d4:
-         69:c2:cd:dc:b7:40:8a:9b:13:16:04:47:33:b5:0d:91:ef:62:
-         25:56:37:88:05:35:25:31:b9:fb:0f:fe:d1:03:75:f5:52:80:
-         22:d7:f9:96:07:7f:73:ea:a7:1b:99:28:f3:7b:eb:b1:5a:0a:
-         4e:fc:53:e1:6e:cb:eb:bc:43:c7:a9:91:39:88:f8:45:7b:41:
-         97:eb:d4:2c:45:20:16:7e:cd:51:57:63:3d:ac:1d:aa:ba:43:
-         ec:08:e8:87:d5:c0:0d:16:d8:7b:d1:b0:6e:33:ac:88:9b:1a:
-         09:f4:12:92:6a:d5:8f:17:a9:a0:fd:f2:d8:b3:91:c1:41:32:
-         d8:43:27:55:57:fa:0e:08:87:98:bc:15:86:9f:ad:2b:48:c2:
-         ae:aa:86:60:de:77:08:e2:a4:da:ec:75:7c:6b:12:1d:b5:a8:
-         43:16:55:18:ee:c2:76:2c:38:0a:c2:ca:5f:d3:98:86:4b:e8:
-         40:20:b5:5c:7b:04:71:37:1b:4a:1d:fd:24:cc:04:2d:b1:27:
-         eb:aa:a9:ef:36:1b:48:db:8e:21:ad:03:d4:90:03:4c:67:45:
-         f4:b7:2d:19:f0:f7:1e:a1:0a:21:52:0f:89:5c:0c:50:81:e6:
-         13:fa:51:77
+         5f:ff:6e:d1:01:0c:c2:c6:57:f7:57:71:b6:28:12:b0:7c:24:
+         66:ca:cf:5f:3a:14:cb:77:07:14:a5:01:a9:22:6f:b1:60:fa:
+         8d:0b:91:54:c7:24:ab:af:9b:be:73:63:fb:08:0c:31:94:5b:
+         25:2a:a7:e3:6b:cb:89:c1:7b:48:fb:df:50:4f:3e:fd:97:aa:
+         6f:40:2b:1d:15:97:3d:04:3a:6f:c9:dd:04:c7:73:75:88:06:
+         e8:e1:cf:bf:c6:d4:12:b9:73:f4:0f:2d:1c:af:06:51:96:ee:
+         77:fe:65:28:e6:3b:4d:67:0c:55:83:9a:b9:6e:4d:1f:3a:58:
+         a2:03:6f:0f:1f:58:f2:b2:b4:dd:86:bd:fd:53:5c:20:6b:1e:
+         73:c7:89:5d:8b:79:31:f6:33:b2:6c:5d:8b:52:b7:b7:4d:dc:
+         a4:80:87:54:2a:7a:af:cd:41:ba:82:bb:34:46:25:85:e9:87:
+         61:2e:3b:d9:52:09:27:ec:eb:58:9a:39:b8:e0:bc:67:cb:af:
+         b7:f0:3f:1c:93:23:42:f2:00:9b:9d:61:6a:d7:ce:5a:67:72:
+         b7:06:da:de:13:11:e0:7c:16:69:91:fd:f8:e1:bd:ab:b6:bb:
+         96:f9:82:51:8d:e5:ef:1d:6e:b2:97:d6:9d:75:0f:cb:ed:07:
+         96:4a:e5:17
 -----BEGIN CERTIFICATE-----
 MIIDYzCCAkugAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDTELMAkGA1UEAwwCSTEw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJkdi7mYtpo2QT11gTlz7
-xFQifAfWr1fy1csAJCprDHbjkBT+0At0+jqiM8mzH5/VaXx8UVaP6UjnrMB2cqQd
-kw3DtO2ZLVpwMemDoVgFblDALl3Z4pem7wjhIRymGHQjheAPt4W3POiiqwlAkbQh
-USsgvpao6+kuoQ4Qvb81kMgCfwjBHGwscZh5XHiDLJZr8P6FvfkRaouGL3Nk4pQx
-zLw1Zb1DQnr6EqRxr38vSSjpBwTS0gt/g7iAILAet3/CJBO5BJI1AHc6ho++Goh5
-fDwPsmIhjRwEIn//4MRvmGhy1gKXchlxS12zkE6zcWhYnf9T8ONdTAEfGC/X0HJv
-AgMBAAGjgcswgcgwHQYDVR0OBBYEFGwLYzWsOIvBDPjlU4gJapd26eqrMB8GA1Ud
-IwQYMBaAFD3dLAC+ieBDTAV3Zwdg/Ky+SNCkMDcGCCsGAQUFBwEBBCswKTAnBggr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 BgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlhL1Jvb3QuY2VyMCwGA1UdHwQlMCMw
 IaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9Sb290LmNybDAOBgNVHQ8BAf8EBAMC
-AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAFHr5I9kV2pVy
-MWfOJy+gul7UacLN3LdAipsTFgRHM7UNke9iJVY3iAU1JTG5+w/+0QN19VKAItf5
-lgd/c+qnG5ko83vrsVoKTvxT4W7L67xDx6mROYj4RXtBl+vULEUgFn7NUVdjPawd
-qrpD7Ajoh9XADRbYe9GwbjOsiJsaCfQSkmrVjxepoP3y2LORwUEy2EMnVVf6DgiH
-mLwVhp+tK0jCrqqGYN53COKk2ux1fGsSHbWoQxZVGO7Cdiw4CsLKX9OYhkvoQCC1
-XHsEcTcbSh39JMwELbEn66qp7zYbSNuOIa0D1JADTGdF9LctGfD3HqEKIVIPiVwM
-UIHmE/pRdw==
+AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAX/9u0QEMwsZX
+91dxtigSsHwkZsrPXzoUy3cHFKUBqSJvsWD6jQuRVMckq6+bvnNj+wgMMZRbJSqn
+42vLicF7SPvfUE8+/Zeqb0ArHRWXPQQ6b8ndBMdzdYgG6OHPv8bUErlz9A8tHK8G
+UZbud/5lKOY7TWcMVYOauW5NHzpYogNvDx9Y8rK03Ya9/VNcIGsec8eJXYt5MfYz
+smxdi1K3t03cpICHVCp6r81BuoK7NEYlhemHYS472VIJJ+zrWJo5uOC8Z8uvt/A/
+HJMjQvIAm51hatfOWmdytwba3hMR4HwWaZH9+OG9q7a7lvmCUY3l7x1uspfWnXUP
+y+0HlkrlFw==
 -----END CERTIFICATE-----