De-prioritize 2.23.140.1.1 when searching for EV policy.

net/cert/ev_root_ca_metadata.h

Index: net/cert/ev_root_ca_metadata.h
diff --git a/net/cert/ev_root_ca_metadata.h b/net/cert/ev_root_ca_metadata.h
index c803bee03944848db34ff1a3881bfc8f8bccd887..4fb5fc2f1a6b0ec915cdefe891a1d3d1777cc120 100644
--- a/net/cert/ev_root_ca_metadata.h
+++ b/net/cert/ev_root_ca_metadata.h
@@ -54,6 +54,11 @@ class NET_EXPORT_PRIVATE EVRootCAMetadata {
   // the EV policy OID policy_oid.
   bool HasEVPolicyOID(const SHA1HashValue& fingerprint,
                       PolicyOID policy_oid) const;
+
+  // Returns true if |policy_oid| is for 2.23.140.1.1 (CA/Browser Forum's
+  // Extended Validation Policy).
+  // TODO(eroman): Remove this and instead test each candidate OID.
+  static bool IsCaBrowserForumEvOid(PolicyOID policy_oid);
 #endif
 
   // AddEVCA adds an EV CA to the list of known EV CAs with the given policy.