De-prioritize 2.23.140.1.1 when searching for EV policy.

net/data/ssl/certificates/trustcenter.websecurity.symantec.com.pem

Index: net/data/ssl/certificates/trustcenter.websecurity.symantec.com.pem
diff --git a/net/data/ssl/certificates/trustcenter.websecurity.symantec.com.pem b/net/data/ssl/certificates/trustcenter.websecurity.symantec.com.pem
new file mode 100644
index 0000000000000000000000000000000000000000..e3143a9b65330902f6486878b428ac548830869e
--- /dev/null
+++ b/net/data/ssl/certificates/trustcenter.websecurity.symantec.com.pem
@@ -0,0 +1,225 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            63:2e:d9:c0:ee:ab:b8:f6:1b:1e:57:cb:6c:95:f5:2e
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
+        Validity
+            Not Before: Dec 22 00:00:00 2016 GMT
+            Not After : Dec 22 23:59:59 2018 GMT
+        Subject: 1.3.6.1.4.1.311.60.2.1.3=US/1.3.6.1.4.1.311.60.2.1.2=Delaware/businessCategory=Private Organization/serialNumber=2158113, C=US/postalCode=94043, ST=California, L=Mountain View/street=350 Ellis Street, O=Symantec Corporation, OU=Infrastructure Operations, CN=trustcenter.websecurity.symantec.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:aa:a4:a8:81:35:74:69:14:e1:2c:cb:cd:16:91:
+                    35:ea:76:ac:81:7b:15:41:46:92:f2:21:87:86:23:
+                    9c:66:42:ee:67:4a:df:23:97:42:f1:d7:54:27:dd:
+                    7a:78:2f:58:6f:50:fb:d2:7e:14:42:98:a3:fd:8e:
+                    cb:d7:48:51:dd:51:27:8b:49:08:80:98:3e:a7:f7:
+                    92:b2:06:d3:5e:26:71:3e:65:2d:b2:6a:af:6c:21:
+                    80:37:6e:aa:22:ae:d2:74:3a:2b:34:ea:4d:5f:dc:
+                    bf:95:f4:86:ea:41:f3:11:c8:c2:3a:33:1e:4e:d2:
+                    8f:0b:1c:69:fa:18:7f:1f:b1:56:6f:6d:8b:c3:c8:
+                    31:30:8e:09:fd:f7:82:c8:d9:03:83:2f:51:69:3c:
+                    8f:ee:f2:a9:5e:b2:ac:10:26:f0:cb:ae:72:44:7d:
+                    11:65:b4:49:3f:4e:41:2d:33:ed:a4:19:b1:ad:14:
+                    63:34:01:f4:1d:11:83:9e:ef:e8:30:4b:f1:55:a2:
+                    a0:80:3d:ca:59:ca:7b:8f:75:85:a2:9d:01:56:0c:
+                    96:77:e2:12:ff:d9:b3:e5:48:d4:b0:a5:63:50:51:
+                    c3:8d:35:cb:87:16:09:5c:6e:0a:e3:82:da:b0:cd:
+                    a4:60:c0:af:69:13:a3:7d:d1:04:c3:8f:c5:30:b8:
+                    cc:ff
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:trustcenter.websecurity.symantec.com
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 2.23.140.1.1
+                Policy: 2.16.840.1.113733.1.7.23.6
+                  CPS: https://d.symcb.com/cps
+                  User Notice:
+                    Explicit Text: https://d.symcb.com/rpa
+
+            X509v3 Authority Key Identifier: 
+                keyid:01:59:AB:E7:DD:3A:0B:59:A6:64:63:D6:CF:20:07:57:D5:91:E7:6A
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://sr.symcb.com/sr.crl
+
+            Authority Information Access: 
+                OCSP - URI:http://sr.symcd.com
+                CA Issuers - URI:http://sr.symcb.com/sr.crt
+
+            1.3.6.1.4.1.11129.2.4.2: 
+    Signature Algorithm: sha256WithRSAEncryption
+         0c:e4:4b:4c:57:2e:a7:df:f2:7e:9e:8b:d9:c1:25:99:a8:12:
+         8e:cd:fe:2d:9d:1a:4c:00:00:bb:50:2c:8f:cd:87:8c:13:4b:
+         07:e2:5e:79:0d:b8:c1:eb:c0:ed:4d:6a:93:a5:db:c8:f3:4c:
+         52:12:e0:41:31:c7:1f:6f:aa:8b:94:55:62:46:4c:18:60:b5:
+         ec:bd:e3:87:80:60:dc:40:59:d2:1f:5b:b9:83:00:4a:70:9f:
+         0a:95:8c:8c:f2:2d:18:98:d3:15:cd:db:81:c0:dd:85:34:d5:
+         ce:1b:c1:14:0b:29:ca:2a:cb:81:7e:18:e9:da:8b:ae:1b:3b:
+         d9:db:60:40:52:7f:0b:e5:2b:e2:57:ce:cd:0e:28:96:de:5a:
+         48:a7:75:5a:20:6e:92:73:c9:d0:2a:84:db:24:dd:64:a5:90:
+         1c:3c:e8:68:3c:87:fc:1e:5d:7f:0b:97:1a:c6:52:79:82:8e:
+         f9:ce:02:d6:e1:50:b4:53:a0:33:f3:01:a0:3a:f4:06:5a:38:
+         b0:ad:19:f5:9a:32:0b:82:44:23:60:02:38:79:d1:fc:c6:e0:
+         77:8d:12:80:00:f9:78:4a:c3:7f:72:7a:ad:7c:05:7f:c8:e0:
+         13:3b:44:47:6d:f7:ee:58:0d:c6:ed:73:93:5e:99:28:9e:3e:
+         1f:60:b4:54
+-----BEGIN CERTIFICATE-----
+MIIHRTCCBi2gAwIBAgIQYy7ZwO6ruPYbHlfLbJX1LjANBgkqhkiG9w0BAQsFADB3
+MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
+BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj
+IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTYxMjIyMDAwMDAwWhcNMTgxMjIy
+MjM1OTU5WjCCATgxEzARBgsrBgEEAYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIB
+AgwIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYD
+VQQFEwcyMTU4MTEzMQswCQYDVQQGEwJVUzEOMAwGA1UEEQwFOTQwNDMxEzARBgNV
+BAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxGTAXBgNVBAkM
+EDM1MCBFbGxpcyBTdHJlZXQxHTAbBgNVBAoMFFN5bWFudGVjIENvcnBvcmF0aW9u
+MSIwIAYDVQQLDBlJbmZyYXN0cnVjdHVyZSBPcGVyYXRpb25zMS0wKwYDVQQDDCR0
+cnVzdGNlbnRlci53ZWJzZWN1cml0eS5zeW1hbnRlYy5jb20wggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQCqpKiBNXRpFOEsy80WkTXqdqyBexVBRpLyIYeG
+I5xmQu5nSt8jl0Lx11Qn3Xp4L1hvUPvSfhRCmKP9jsvXSFHdUSeLSQiAmD6n95Ky
+BtNeJnE+ZS2yaq9sIYA3bqoirtJ0Ois06k1f3L+V9IbqQfMRyMI6Mx5O0o8LHGn6
+GH8fsVZvbYvDyDEwjgn994LI2QODL1FpPI/u8qlesqwQJvDLrnJEfRFltEk/TkEt
+M+2kGbGtFGM0AfQdEYOe7+gwS/FVoqCAPcpZynuPdYWinQFWDJZ34hL/2bPlSNSw
+pWNQUcONNcuHFglcbgrjgtqwzaRgwK9pE6N90QTDj8UwuMz/AgMBAAGjggMIMIID
+BDAvBgNVHREEKDAmgiR0cnVzdGNlbnRlci53ZWJzZWN1cml0eS5zeW1hbnRlYy5j
+b20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
+AwEGCCsGAQUFBwMCMG8GA1UdIARoMGYwBwYFZ4EMAQEwWwYLYIZIAYb4RQEHFwYw
+TDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUH
+AgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUAVmr5906
+C1mmZGPWzyAHV9WR52owKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3NyLnN5bWNi
+LmNvbS9zci5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v
+c3Iuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Iuc3ltY2IuY29tL3Ny
+LmNydDCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA3esdK3oNT6Ygi4GtgWhw
+fi6OnQHVXIiNPRHEzbbsvswAAAFZI/WvZwAABAMARzBFAiB2aElKdjf+/hhIZ5UU
+jLXLhb8t4O4SroL85Xy0e0L+tQIhAP81wCJr4JonZ+Vn0UPOEj+EqmmUFtYzI+hV
+cU6XVEjOAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFZI/Wv
+uAAABAMARzBFAiA3camsaIGN2AHELeYmjcLeds/4N3/GV/VOvx78gLmqBgIhAO7e
+gwMKhlU2UOVZUH2ZEdH3BECDr+/PY1buXFzm9DJuAHUAvHjh38X2PGhGSTNNoQ+h
+Xwl5aSAJwIG08/aRfz7ZuKUAAAFZI/WwZQAABAMARjBEAiArg7uTYAvh3IBU4Qlz
+zOZxjY8JzjoxEUk20hkzsy54mAIgc2uRlElRnMfFeUoMSBGLKk9VPC0LZUpmSs4O
+xEiL22AwDQYJKoZIhvcNAQELBQADggEBAAzkS0xXLqff8n6ei9nBJZmoEo7N/i2d
+GkwAALtQLI/Nh4wTSwfiXnkNuMHrwO1NapOl28jzTFIS4EExxx9vqouUVWJGTBhg
+tey944eAYNxAWdIfW7mDAEpwnwqVjIzyLRiY0xXN24HA3YU01c4bwRQLKcoqy4F+
+GOnai64bO9nbYEBSfwvlK+JXzs0OKJbeWkindVogbpJzydAqhNsk3WSlkBw86Gg8
+h/weXX8LlxrGUnmCjvnOAtbhULRToDPzAaA69AZaOLCtGfWaMguCRCNgAjh50fzG
+4HeNEoAA+XhKw39yeq18BX/I4BM7REdt9+5YDcbtc5NemSiePh9gtFQ=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            7e:e1:4a:6f:6f:ef:f2:d3:7f:3f:ad:65:4d:3a:da:b4
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
+        Validity
+            Not Before: Oct 31 00:00:00 2013 GMT
+            Not After : Oct 30 23:59:59 2023 GMT
+        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 EV SSL CA - G3
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:d8:a1:65:74:23:e8:2b:64:e2:32:d7:33:37:3d:
+                    8e:f5:34:16:48:dd:4f:7f:87:1c:f8:44:23:13:8e:
+                    fb:11:d8:44:5a:18:71:8e:60:16:26:92:9b:fd:17:
+                    0b:e1:71:70:42:fe:bf:fa:1c:c0:aa:a3:a7:b5:71:
+                    e8:ff:18:83:f6:df:10:0a:13:62:c8:3d:9c:a7:de:
+                    2e:3f:0c:d9:1d:e7:2e:fb:2a:ce:c8:9a:7f:87:bf:
+                    d8:4c:04:15:32:c9:d1:cc:95:71:a0:4e:28:4f:84:
+                    d9:35:fb:e3:86:6f:94:53:e6:72:8a:63:67:2e:be:
+                    69:f6:f7:6e:8e:9c:60:04:eb:29:fa:c4:47:42:d2:
+                    78:98:e3:ec:0b:a5:92:dc:b7:9a:bd:80:64:2b:38:
+                    7c:38:09:5b:66:f6:2d:95:7a:86:b2:34:2e:85:9e:
+                    90:0e:5f:b7:5d:a4:51:72:46:70:13:bf:67:f2:b6:
+                    a7:4d:14:1e:6c:b9:53:ee:23:1a:4e:8d:48:55:43:
+                    41:b1:89:75:6a:40:28:c5:7d:dd:d2:6e:d2:02:19:
+                    2f:7b:24:94:4b:eb:f1:1a:a9:9b:e3:23:9a:ea:fa:
+                    33:ab:0a:2c:b7:f4:60:08:dd:9f:1c:cd:dd:2d:01:
+                    66:80:af:b3:2f:29:1d:23:b8:8a:e1:a1:70:07:0c:
+                    34:0f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            Authority Information Access: 
+                OCSP - URI:http://s2.symcb.com
+
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+                  CPS: http://www.symauth.com/cps
+                  User Notice:
+                    Explicit Text: http://www.symauth.com/rpa
+
+            X509v3 CRL Distribution Points: 
+                URI:http://s1.symcb.com/pca3-g5.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Alternative Name: 
+                DirName:/CN=SymantecPKI-1-533
+            X509v3 Subject Key Identifier: 
+                01:59:AB:E7:DD:3A:0B:59:A6:64:63:D6:CF:20:07:57:D5:91:E7:6A
+            X509v3 Authority Key Identifier: 
+                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
+
+    Signature Algorithm: sha256WithRSAEncryption
+        42:01:55:7b:d0:16:1a:5d:58:e8:bb:9b:a8:4d:d7:f3:d7:eb:
+        13:94:86:d6:7f:21:0b:47:bc:57:9b:92:5d:4f:05:9f:38:a4:
+        10:7c:cf:83:be:06:43:46:8d:08:bc:6a:d7:10:a6:fa:ab:af:
+        2f:61:a8:63:f2:65:df:7f:4c:88:12:88:4f:b3:69:d9:ff:27:
+        c0:0a:97:91:8f:56:fb:89:c4:a8:bb:92:2d:1b:73:b0:c6:ab:
+        36:f4:96:6c:20:08:ef:0a:1e:66:24:45:4f:67:00:40:c8:07:
+        54:74:33:3b:a6:ad:bb:23:9f:66:ed:a2:44:70:34:fb:0e:ea:
+        01:fd:cf:78:74:df:a7:ad:55:b7:5f:4d:f6:d6:3f:e0:86:ce:
+        24:c7:42:a9:13:14:44:35:4b:b6:df:c9:60:ac:0c:7f:d9:93:
+        21:4b:ee:9c:e4:49:02:98:d3:60:7b:5c:bc:d5:30:2f:07:ce:
+        44:42:c4:0b:99:fe:e6:9f:fc:b0:78:86:51:6d:d1:2c:9d:c6:
+        96:fb:85:82:bb:04:2f:f7:62:80:ef:62:da:7f:f6:0e:ac:90:
+        b8:56:bd:79:3f:f2:80:6e:a3:d9:b9:0f:5d:3a:07:1d:91:93:
+        86:4b:29:4c:e1:dc:b5:e1:e0:33:9d:b3:cb:36:91:4b:fe:a1:
+        b4:ee:f0:f9
+-----BEGIN CERTIFICATE-----
+MIIFKzCCBBOgAwIBAgIQfuFKb2/v8tN/P61lTTratDANBgkqhkiG9w0BAQsFADCB
+yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
+ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp
+U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW
+ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0
+aG9yaXR5IC0gRzUwHhcNMTMxMDMxMDAwMDAwWhcNMjMxMDMwMjM1OTU5WjB3MQsw
+CQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAdBgNV
+BAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVjIENs
+YXNzIDMgRVYgU1NMIENBIC0gRzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
+AoIBAQDYoWV0I+grZOIy1zM3PY71NBZI3U9/hxz4RCMTjvsR2ERaGHGOYBYmkpv9
+FwvhcXBC/r/6HMCqo6e1cej/GIP23xAKE2LIPZyn3i4/DNkd5y77Ks7Imn+Hv9hM
+BBUyydHMlXGgTihPhNk1++OGb5RT5nKKY2cuvmn2926OnGAE6yn6xEdC0niY4+wL
+pZLct5q9gGQrOHw4CVtm9i2VeoayNC6FnpAOX7ddpFFyRnATv2fytqdNFB5suVPu
+IxpOjUhVQ0GxiXVqQCjFfd3SbtICGS97JJRL6/EaqZvjI5rq+jOrCiy39GAI3Z8c
+zd0tAWaAr7MvKR0juIrhoXAHDDQPAgMBAAGjggFdMIIBWTAvBggrBgEFBQcBAQQj
+MCEwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zMi5zeW1jYi5jb20wEgYDVR0TAQH/BAgw
+BgEB/wIBADBlBgNVHSAEXjBcMFoGBFUdIAAwUjAmBggrBgEFBQcCARYaaHR0cDov
+L3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3dy5z
+eW1hdXRoLmNvbS9ycGEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL3MxLnN5bWNi
+LmNvbS9wY2EzLWc1LmNybDAOBgNVHQ8BAf8EBAMCAQYwKQYDVR0RBCIwIKQeMBwx
+GjAYBgNVBAMTEVN5bWFudGVjUEtJLTEtNTMzMB0GA1UdDgQWBBQBWavn3ToLWaZk
+Y9bPIAdX1ZHnajAfBgNVHSMEGDAWgBR/02Wnwt3su/AwCfNDOfoCrzMxMzANBgkq
+hkiG9w0BAQsFAAOCAQEAQgFVe9AWGl1Y6LubqE3X89frE5SG1n8hC0e8V5uSXU8F
+nzikEHzPg74GQ0aNCLxq1xCm+quvL2GoY/Jl339MiBKIT7Np2f8nwAqXkY9W+4nE
+qLuSLRtzsMarNvSWbCAI7woeZiRFT2cAQMgHVHQzO6atuyOfZu2iRHA0+w7qAf3P
+eHTfp61Vt19N9tY/4IbOJMdCqRMURDVLtt/JYKwMf9mTIUvunORJApjTYHtcvNUw
+LwfORELEC5n+5p/8sHiGUW3RLJ3GlvuFgrsEL/digO9i2n/2DqyQuFa9eT/ygG6j
+2bkPXToHHZGThkspTOHcteHgM52zyzaRS/6htO7w+Q==
+-----END CERTIFICATE-----