De-prioritize 2.23.140.1.1 when searching for EV policy.

net/cert/ev_root_ca_metadata.h

Index: net/cert/ev_root_ca_metadata.h
diff --git a/net/cert/ev_root_ca_metadata.h b/net/cert/ev_root_ca_metadata.h
index e99cdd1f19ea8ed6692567388bdd147a0ecef00d..413f85dd92f6cffd3e749e0d0ececa71921972ec 100644
--- a/net/cert/ev_root_ca_metadata.h
+++ b/net/cert/ev_root_ca_metadata.h
@@ -54,6 +54,11 @@ class NET_EXPORT_PRIVATE EVRootCAMetadata {
   // the EV policy OID policy_oid.
   bool HasEVPolicyOID(const SHA1HashValue& fingerprint,
                       PolicyOID policy_oid) const;
+
+  // Returns true if |policy_oid| is for 2.23.140.1.1 (CA/Browser Forum's
+  // Extended Validation Policy).
+  // TODO(eroman): Remove this and instead test each candidate OID.
+  static bool IsCaBrowserForumEvOid(PolicyOID policy_oid);
 #endif
 
   // AddEVCA adds an EV CA to the list of known EV CAs with the given policy.