pki library: Add CertIssuerSourceNSS that retrieves intermediate certs from NSS.

net/data/cert_issuer_source_static_unittest/i1_2.pem

 Generated by ./generate-certs.py.
 Refer to generator script docstring for details.
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 3 (0x3)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=i1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:c5:46:7a:ab:3c:05:2b:17:02:4c:f7:d0:83:7c:
-                    2a:5f:e4:d1:23:23:8f:5c:93:cd:e1:19:b7:6d:a2:
-                    cc:14:51:97:d0:87:1f:2e:a6:fb:9a:b0:f3:15:a3:
-                    e8:de:f0:45:df:ff:44:22:ca:7c:e2:6a:c8:e9:a6:
-                    62:8e:af:2f:21:85:29:d4:2d:31:fe:4c:e1:5a:3b:
-                    cd:3b:8e:bb:e8:d5:55:c1:52:1e:e8:ae:38:f7:ab:
-                    3e:5e:67:7d:a6:96:b2:3d:29:a1:26:f6:b6:23:18:
-                    ef:ed:49:71:64:f5:47:7f:40:e0:f2:b1:45:99:6c:
-                    6a:f4:d4:96:ee:11:b8:d4:bc:9c:04:94:98:ac:0b:
-                    ee:9c:d1:5a:4d:da:0e:3b:da:55:59:12:85:99:41:
-                    c9:d5:ac:ce:f8:8a:6b:fb:e6:6f:97:8f:50:f9:7c:
-                    cd:42:6a:ab:c2:bf:28:1a:2e:33:94:65:b0:f0:56:
-                    7a:be:e0:2a:4e:c3:99:f4:3b:db:12:04:11:d6:c4:
-                    04:6f:4e:3e:c3:23:d3:8c:04:ed:39:c2:99:0f:ca:
-                    c8:0d:bc:6e:f6:d5:a1:5c:26:31:b7:a6:04:ad:6f:
-                    f2:2a:86:cd:bc:f7:5e:11:04:58:bd:db:17:72:31:
-                    28:1c:f3:6d:5a:94:5d:f6:52:bb:9b:73:b8:9a:7a:
-                    08:c9
+                    00:b9:f4:f5:17:e5:0d:0a:46:f6:81:21:97:dd:ba:
+                    5d:f4:16:a7:f8:ec:ac:37:cb:cf:50:d0:de:3b:d1:
+                    9f:7c:22:2d:0b:b6:f4:57:76:3a:69:92:fe:0f:be:
+                    0c:19:bd:2c:bb:49:bb:f1:d7:89:75:b4:3f:d1:e3:
+                    d3:c0:6e:fd:26:63:d9:81:9c:1e:0a:a5:46:6d:18:
+                    f8:ce:e1:ab:29:8f:82:5f:f3:d2:4f:ef:d1:77:20:
+                    11:b5:c6:b3:1d:8f:0c:06:3e:51:91:4a:73:19:f8:
+                    38:b3:b2:57:44:d8:1c:b3:29:8d:85:4f:38:0d:68:
+                    7d:4c:43:5a:73:7d:8a:63:62:a6:19:f0:19:3d:ca:
+                    32:af:b3:72:7d:d2:68:a6:29:ad:26:54:b6:6f:cc:
+                    26:75:3b:c2:58:03:50:af:3b:d2:cc:0a:97:56:ec:
+                    4c:18:2c:de:04:32:26:f3:36:15:50:bd:2c:81:2d:
+                    44:da:8f:4a:dc:44:1e:c6:b1:e6:97:d6:53:a8:01:
+                    ca:c1:e9:0f:1e:17:89:17:c5:07:c1:4d:8b:61:ce:
+                    f3:0f:2a:61:5d:eb:25:45:76:74:6c:c1:a3:b9:79:
+                    db:39:aa:f9:e7:fe:d5:4b:c8:33:81:dd:a4:40:2c:
+                    de:51:e0:48:d3:a3:d5:e7:a7:b8:9b:a0:b5:4f:bf:
+                    ba:cd
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                F9:72:F0:81:01:06:00:24:81:09:78:86:EB:FF:E1:51:82:0A:A8:44
+                0C:6A:CE:BB:AC:0D:C3:03:19:28:BF:63:76:72:0B:3D:89:5B:D3:B7
             X509v3 Authority Key Identifier: 
-                keyid:53:00:1D:70:48:9E:90:44:14:41:A0:92:6E:B8:1D:ED:EA:77:1F:81
+                keyid:B5:C3:65:5F:95:6A:F7:19:30:E3:80:DD:EF:B0:A4:1B:3D:BE:A6:9D
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         f4:4f:69:8a:2e:d2:9e:f2:64:4f:b3:96:ef:8a:e1:4c:70:6a:
-         06:bb:f0:cf:c3:29:d8:61:1e:7a:79:13:89:7e:2c:67:87:d2:
-         4f:2c:e1:e5:73:99:31:51:ef:bc:b0:b0:5d:de:79:54:58:5a:
-         9b:9f:e9:f2:bb:16:b8:fa:70:cb:10:e0:02:5c:44:2d:a7:3f:
-         33:e2:6a:f1:f4:2e:2c:70:9c:07:4a:aa:72:21:f3:ac:4d:cd:
-         d8:67:74:cd:16:cc:27:81:e9:05:26:4a:ec:1d:4f:a2:6e:c6:
-         b0:88:f5:70:ee:00:cd:b6:61:ff:7f:10:59:a9:28:67:3b:26:
-         c3:53:fc:ff:6c:38:a7:c9:fc:2f:3b:7a:67:0f:a5:66:44:1e:
-         e7:ce:55:d2:df:ca:65:16:63:f6:5f:9f:9f:d0:1f:71:ae:0f:
-         5a:19:42:7c:6d:99:b2:be:28:5d:c1:b6:db:c2:d5:51:74:b8:
-         a3:63:4e:bf:41:45:64:9a:65:3c:f0:2c:97:fb:db:46:0a:52:
-         89:46:6c:7e:2d:19:cd:b5:72:24:7f:86:2f:c0:bd:02:f0:1a:
-         ea:21:7a:23:17:04:1e:01:db:43:95:7a:39:66:90:ac:1c:34:
-         92:19:b1:7a:4f:ff:ae:4a:44:b9:54:f5:2d:e9:ef:a8:9f:a5:
-         ec:85:2c:cf
+         85:49:62:75:55:96:56:c4:8b:46:3a:ee:27:1a:70:84:a4:bc:
+         b5:a1:0e:13:49:a3:00:bc:d4:54:ef:79:a7:8a:8f:cc:85:bc:
+         9f:cc:11:5b:f8:b3:7d:7b:35:46:bb:67:d1:ed:ed:3e:c6:54:
+         76:54:db:29:7d:5f:d0:35:f0:1e:cf:d9:7e:c3:1c:b9:32:2d:
+         62:92:cb:bf:f2:8f:d2:a1:aa:95:c2:d9:be:9e:af:80:22:63:
+         2b:dc:e4:c0:e8:24:64:7c:db:16:85:3c:a3:03:5d:6d:19:88:
+         75:87:21:d3:ef:95:e6:20:79:eb:e1:57:44:e8:72:eb:d6:ea:
+         46:58:62:5d:0c:43:3f:84:46:fb:cc:7e:3d:0b:5c:a5:7e:b0:
+         be:ce:14:92:d8:4a:2a:2f:76:68:cb:ff:ab:7d:ae:ac:58:2f:
+         0d:25:66:46:d3:ac:f5:33:6c:91:c5:98:9d:83:cc:31:a5:c0:
+         17:94:fb:9b:30:a7:de:52:17:dc:e5:72:40:45:37:31:32:a6:
+         c0:a9:c3:18:f2:0f:94:58:95:3c:03:98:15:70:d3:18:f1:e9:
+         91:77:0b:02:02:09:21:6c:b8:34:d4:01:43:e3:97:bb:00:19:
+         fb:21:d7:1e:d1:ef:63:00:ae:c2:b8:5d:53:e4:30:25:47:f0:
+         0f:cd:08:77
 -----BEGIN CERTIFICATE-----
 MIIDYzCCAkugAwIBAgIBAzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDTELMAkGA1UEAwwCaTEw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRnqrPAUrFwJM99CDfCpf
-5NEjI49ck83hGbdtoswUUZfQhx8upvuasPMVo+je8EXf/0QiynziasjppmKOry8h
-hSnULTH+TOFaO807jrvo1VXBUh7orjj3qz5eZ32mlrI9KaEm9rYjGO/tSXFk9Ud/
-QODysUWZbGr01JbuEbjUvJwElJisC+6c0VpN2g472lVZEoWZQcnVrM74imv75m+X
-j1D5fM1CaqvCvygaLjOUZbDwVnq+4CpOw5n0O9sSBBHWxARvTj7DI9OMBO05wpkP
-ysgNvG721aFcJjG3pgStb/Iqhs28914RBFi92xdyMSgc821alF32Urubc7iaegjJ
-AgMBAAGjgcswgcgwHQYDVR0OBBYEFPly8IEBBgAkgQl4huv/4VGCCqhEMB8GA1Ud
-IwQYMBaAFFMAHXBInpBEFEGgkm64He3qdx+BMDcGCCsGAQUFBwEBBCswKTAnBggr
+ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59PUX5Q0KRvaBIZfdul30
+Fqf47Kw3y89Q0N470Z98Ii0LtvRXdjppkv4PvgwZvSy7Sbvx14l1tD/R49PAbv0m
+Y9mBnB4KpUZtGPjO4aspj4Jf89JP79F3IBG1xrMdjwwGPlGRSnMZ+DizsldE2Byz
+KY2FTzgNaH1MQ1pzfYpjYqYZ8Bk9yjKvs3J90mimKa0mVLZvzCZ1O8JYA1CvO9LM
+CpdW7EwYLN4EMibzNhVQvSyBLUTaj0rcRB7GseaX1lOoAcrB6Q8eF4kXxQfBTYth
+zvMPKmFd6yVFdnRswaO5eds5qvnn/tVLyDOB3aRALN5R4EjTo9Xnp7iboLVPv7rN
+AgMBAAGjgcswgcgwHQYDVR0OBBYEFAxqzrusDcMDGSi/Y3ZyCz2JW9O3MB8GA1Ud
+IwQYMBaAFLXDZV+VavcZMOOA3e+wpBs9vqadMDcGCCsGAQUFBwEBBCswKTAnBggr
 BgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlhL1Jvb3QuY2VyMCwGA1UdHwQlMCMw
 IaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9Sb290LmNybDAOBgNVHQ8BAf8EBAMC
-AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEA9E9pii7SnvJk
-T7OW74rhTHBqBrvwz8Mp2GEeenkTiX4sZ4fSTyzh5XOZMVHvvLCwXd55VFham5/p
-8rsWuPpwyxDgAlxELac/M+Jq8fQuLHCcB0qqciHzrE3N2Gd0zRbMJ4HpBSZK7B1P
-om7GsIj1cO4AzbZh/38QWakoZzsmw1P8/2w4p8n8Lzt6Zw+lZkQe585V0t/KZRZj
-9l+fn9Afca4PWhlCfG2Zsr4oXcG228LVUXS4o2NOv0FFZJplPPAsl/vbRgpSiUZs
-fi0ZzbVyJH+GL8C9AvAa6iF6IxcEHgHbQ5V6OWaQrBw0khmxek//rkpEuVT1Lenv
-qJ+l7IUszw==
+AQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAhUlidVWWVsSL
+RjruJxpwhKS8taEOE0mjALzUVO95p4qPzIW8n8wRW/izfXs1Rrtn0e3tPsZUdlTb
+KX1f0DXwHs/ZfsMcuTItYpLLv/KP0qGqlcLZvp6vgCJjK9zkwOgkZHzbFoU8owNd
+bRmIdYch0++V5iB56+FXROhy69bqRlhiXQxDP4RG+8x+PQtcpX6wvs4UkthKKi92
+aMv/q32urFgvDSVmRtOs9TNskcWYnYPMMaXAF5T7mzCn3lIX3OVyQEU3MTKmwKnD
+GPIPlFiVPAOYFXDTGPHpkXcLAgIJIWy4NNQBQ+OXuwAZ+yHXHtHvYwCuwrhdU+Qw
+JUfwD80Idw==
 -----END CERTIFICATE-----