pki library: Add CertIssuerSourceNSS that retrieves intermediate certs from NSS.

net/data/cert_issuer_source_static_unittest/root.pem

 Generated by ./generate-certs.py.
 Refer to generator script docstring for details.
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Root
         Validity
             Not Before: Jan  1 12:00:00 2015 GMT
             Not After : Jan  1 12:00:00 2016 GMT
         Subject: CN=Root
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:a5:0a:40:af:c7:bf:e5:59:4c:96:13:a9:79:fe:
-                    ea:f1:ed:96:d3:c2:44:56:9a:a8:d1:15:1b:df:43:
-                    17:6e:4e:6c:9f:b8:4b:5b:6e:65:cb:ca:fe:00:0d:
-                    39:7b:00:55:69:ae:ef:28:97:67:2e:49:20:e3:03:
-                    78:98:66:b8:f3:f9:fc:79:ca:ec:f9:2d:8e:f4:33:
-                    3c:74:e4:d7:07:08:9b:6f:a9:1b:50:c2:9a:5e:57:
-                    15:cc:7c:64:e0:14:9c:77:7d:62:69:83:db:f2:85:
-                    21:e9:02:41:18:45:0e:3a:3b:47:af:4a:c6:04:eb:
-                    5b:bf:dc:09:d8:c1:ae:31:b3:a8:42:83:5f:0a:54:
-                    ff:fa:3e:28:b7:b4:45:5e:c7:4d:b7:d5:d1:b0:e7:
-                    6c:87:d8:36:cb:5d:25:a9:18:d4:0b:fe:d8:47:88:
-                    78:4e:f9:40:af:a2:3c:d7:91:25:16:b7:15:34:13:
-                    6f:ae:c3:d7:2a:36:10:22:92:6c:9d:68:62:92:70:
-                    a9:c6:ff:98:9e:ea:cf:9f:a6:17:61:ff:f5:2e:5c:
-                    f5:79:cb:44:6e:be:a6:cf:b8:e6:8c:50:34:04:b3:
-                    ee:79:cf:67:7b:f9:ad:b5:85:50:11:10:2f:e1:43:
-                    7d:fd:1a:45:5c:7b:5d:a5:bd:50:ac:5b:19:5e:20:
-                    33:a9
+                    00:bc:0a:87:63:a0:a0:fe:a8:d4:b1:9b:54:19:d6:
+                    12:74:61:bc:42:6d:1c:6f:c8:96:e9:6a:3d:16:e8:
+                    cf:3a:c3:2f:eb:a8:7d:be:0c:3f:46:8c:b7:6d:29:
+                    82:a8:38:6f:74:ca:9f:14:45:f7:e4:25:a5:26:ba:
+                    22:55:a3:b6:98:3a:c9:62:22:a5:24:71:8b:66:33:
+                    fc:b5:20:aa:d1:8c:83:f7:b3:19:4e:59:51:fb:82:
+                    d7:fc:ea:78:a6:02:7f:7f:80:6f:4d:d1:3e:61:d6:
+                    d9:f9:40:51:85:0f:bf:2d:56:98:d0:d5:47:ed:47:
+                    e3:1d:3f:e3:e3:55:11:98:6b:94:b0:9f:ac:98:34:
+                    f5:e1:d9:d0:f7:bb:dc:de:3e:18:1f:06:81:30:41:
+                    8c:ba:70:98:ee:38:0f:a1:dc:5b:01:b0:b0:6a:5c:
+                    7b:10:d5:aa:8a:40:33:79:9c:71:44:3a:aa:e1:f0:
+                    70:5c:7e:eb:ae:7f:fb:4d:bb:4d:af:8e:7a:62:cd:
+                    d9:d6:bf:74:7a:3c:8a:1a:74:07:7a:7c:29:b4:f7:
+                    8c:cc:52:19:1a:f1:d8:a4:9a:a5:35:83:9a:3f:b0:
+                    46:1b:15:ee:ae:94:c6:fd:96:f5:dd:e1:98:7b:48:
+                    8e:9a:e3:fb:1a:57:84:c1:ae:69:af:2f:d0:76:99:
+                    e5:61
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                3D:DD:2C:00:BE:89:E0:43:4C:05:77:67:07:60:FC:AC:BE:48:D0:A4
+                B5:C3:65:5F:95:6A:F7:19:30:E3:80:DD:EF:B0:A4:1B:3D:BE:A6:9D
             X509v3 Authority Key Identifier: 
-                keyid:3D:DD:2C:00:BE:89:E0:43:4C:05:77:67:07:60:FC:AC:BE:48:D0:A4
+                keyid:B5:C3:65:5F:95:6A:F7:19:30:E3:80:DD:EF:B0:A4:1B:3D:BE:A6:9D
 
             Authority Information Access: 
                 CA Issuers - URI:http://url-for-aia/Root.cer
 
             X509v3 CRL Distribution Points: 
 
                 Full Name:
                   URI:http://url-for-crl/Root.crl
 
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Basic Constraints: critical
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         47:35:34:46:02:c2:86:e2:11:86:8c:cd:65:15:08:a5:2a:f7:
-         21:d8:d7:ae:b8:0a:c2:e7:0c:a6:f6:bc:50:d4:e1:7e:53:f6:
-         77:7d:8d:39:a5:85:b6:e8:0d:ac:a8:25:16:da:f6:9d:f7:1f:
-         18:06:0b:bf:dd:e1:90:4e:90:7c:2b:24:77:b1:58:9b:39:fc:
-         2e:d1:0e:1d:c7:a4:c7:70:2c:92:78:19:49:5c:7c:3d:5a:a7:
-         b7:f3:89:f5:4f:48:1d:39:4f:53:a8:6f:e3:7c:62:9b:db:c5:
-         3f:ca:8a:e9:fe:83:f3:b9:66:20:28:89:1a:2c:8f:8a:07:6e:
-         4d:7b:fb:7b:f9:48:6f:07:d0:b2:f3:7d:d6:c8:42:1f:81:41:
-         0b:af:6b:4d:e2:19:6a:4a:1e:37:5b:de:fe:f8:82:e5:0b:ef:
-         bd:20:0f:e3:2a:81:1a:35:ab:6b:38:d3:a9:29:09:f5:28:a8:
-         13:d1:c4:a7:aa:ea:3f:e3:8b:be:20:24:93:8d:06:da:8c:ce:
-         01:b1:61:ce:33:bb:ea:96:d0:01:11:e0:81:06:bc:1c:7b:62:
-         99:d1:f3:ef:a8:a7:ec:6a:bb:e9:2c:d6:d1:52:f0:a1:b6:e2:
-         71:6a:f6:06:2d:9f:79:14:28:47:b8:dd:d9:02:65:a9:53:cf:
-         f5:3d:b9:ee
+         6a:84:0c:35:b2:ec:47:ab:8b:be:3c:6f:e7:ae:84:8a:7d:6c:
+         ca:00:6f:98:51:15:f7:e7:fb:89:a9:43:b0:01:6c:b7:33:0a:
+         c1:e2:95:1e:d1:df:ec:17:a3:07:14:9e:04:9f:b4:68:f5:ed:
+         27:dc:49:e9:b0:74:5b:a2:a5:9d:f6:da:f3:bf:66:9e:dd:43:
+         bf:ff:80:06:36:0d:1a:ba:52:b1:e3:5b:06:71:ae:b5:b6:d2:
+         b9:bc:3a:73:c0:da:24:62:2b:7b:8f:25:f0:95:aa:5d:d3:d6:
+         3c:6f:68:38:2f:98:e5:43:6b:95:e6:f6:75:87:28:88:6d:7e:
+         94:15:b5:71:93:8e:b9:9d:38:74:49:5a:93:03:59:03:59:21:
+         2b:7e:95:0e:4d:ec:5c:eb:44:97:08:43:11:dd:05:ab:46:7d:
+         55:7f:33:b7:96:24:40:00:9a:50:8b:8c:d3:f1:87:84:3d:a6:
+         3d:83:2e:e0:49:a4:25:8b:1c:2e:c5:d1:7d:3d:1d:52:75:33:
+         f6:e0:41:7b:fa:92:f1:b9:fa:63:cd:c3:91:2f:0a:ec:6f:77:
+         a6:e3:30:06:4f:19:98:0f:17:ca:61:65:5d:3b:b4:b8:80:8f:
+         d4:de:ad:75:d6:6a:34:e8:24:3a:ca:f2:d2:1b:e1:10:bd:64:
+         78:37:21:26
 -----BEGIN CERTIFICATE-----
 MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
 MB4XDTE1MDEwMTEyMDAwMFoXDTE2MDEwMTEyMDAwMFowDzENMAsGA1UEAwwEUm9v
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKUKQK/Hv+VZTJYTqXn+
-6vHtltPCRFaaqNEVG99DF25ObJ+4S1tuZcvK/gANOXsAVWmu7yiXZy5JIOMDeJhm
-uPP5/HnK7PktjvQzPHTk1wcIm2+pG1DCml5XFcx8ZOAUnHd9YmmD2/KFIekCQRhF
-Djo7R69KxgTrW7/cCdjBrjGzqEKDXwpU//o+KLe0RV7HTbfV0bDnbIfYNstdJakY
-1Av+2EeIeE75QK+iPNeRJRa3FTQTb67D1yo2ECKSbJ1oYpJwqcb/mJ7qz5+mF2H/
-9S5c9XnLRG6+ps+45oxQNASz7nnPZ3v5rbWFUBEQL+FDff0aRVx7XaW9UKxbGV4g
-M6kCAwEAAaOByzCByDAdBgNVHQ4EFgQUPd0sAL6J4ENMBXdnB2D8rL5I0KQwHwYD
-VR0jBBgwFoAUPd0sAL6J4ENMBXdnB2D8rL5I0KQwNwYIKwYBBQUHAQEEKzApMCcG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 CCsGAQUFBzAChhtodHRwOi8vdXJsLWZvci1haWEvUm9vdC5jZXIwLAYDVR0fBCUw
 IzAhoB+gHYYbaHR0cDovL3VybC1mb3ItY3JsL1Jvb3QuY3JsMA4GA1UdDwEB/wQE
-AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBHNTRGAsKG
-4hGGjM1lFQilKvch2NeuuArC5wym9rxQ1OF+U/Z3fY05pYW26A2sqCUW2vad9x8Y
-Bgu/3eGQTpB8KyR3sVibOfwu0Q4dx6THcCySeBlJXHw9Wqe384n1T0gdOU9TqG/j
-fGKb28U/yorp/oPzuWYgKIkaLI+KB25Ne/t7+UhvB9Cy833WyEIfgUELr2tN4hlq
-Sh43W97++ILlC++9IA/jKoEaNatrONOpKQn1KKgT0cSnquo/44u+ICSTjQbajM4B
-sWHOM7vqltABEeCBBrwce2KZ0fPvqKfsarvpLNbRUvChtuJxavYGLZ95FChHuN3Z
-AmWpU8/1Pbnu
+AwIBBjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBqhAw1suxH
+q4u+PG/nroSKfWzKAG+YURX35/uJqUOwAWy3MwrB4pUe0d/sF6MHFJ4En7Ro9e0n
+3EnpsHRboqWd9trzv2ae3UO//4AGNg0aulKx41sGca61ttK5vDpzwNokYit7jyXw
+lapd09Y8b2g4L5jlQ2uV5vZ1hyiIbX6UFbVxk465nTh0SVqTA1kDWSErfpUOTexc
+60SXCEMR3QWrRn1VfzO3liRAAJpQi4zT8YeEPaY9gy7gSaQlixwuxdF9PR1SdTP2
+4EF7+pLxufpjzcORLwrsb3em4zAGTxmYDxfKYWVdO7S4gI/U3q111mo06CQ6yvLS
+G+EQvWR4NyEm
 -----END CERTIFICATE-----