Restrict the set of WoSign/StartCom certs to the Alexa Top 1M

net/cert/cert_verify_proc.cc

Index: net/cert/cert_verify_proc.cc
diff --git a/net/cert/cert_verify_proc.cc b/net/cert/cert_verify_proc.cc
index a20ee3f24e29be7859a396241c23ccd30bdfdc01..d946256101271119c9d3f0f68ddb53651f1aa8cf 100644
--- a/net/cert/cert_verify_proc.cc
+++ b/net/cert/cert_verify_proc.cc
@@ -513,7 +513,7 @@ int CertVerifyProc::Verify(X509Certificate* cert,
   }
 
   if (IsNonWhitelistedCertificate(*verify_result->verified_cert,
-                                  verify_result->public_key_hashes)) {
+                                  verify_result->public_key_hashes, hostname)) {
     verify_result->cert_status |= CERT_STATUS_AUTHORITY_INVALID;
     rv = MapCertStatusToNetError(verify_result->cert_status);
   }