Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/cert/internal/trust_store_nss.h

Index: net/cert/internal/trust_store_nss.h
diff --git a/net/cert/internal/trust_store_nss.h b/net/cert/internal/trust_store_nss.h
index 760d49953c20d4a2626f6cead9413b07bdc2d2a0..da323dae6f0da9839ba97c8b2435f7a152d1bc51 100644
--- a/net/cert/internal/trust_store_nss.h
+++ b/net/cert/internal/trust_store_nss.h
@@ -23,8 +23,11 @@ class NET_EXPORT TrustStoreNSS : public TrustStore {
   ~TrustStoreNSS() override;
 
   // TrustStore implementation:
-  void FindTrustAnchorsForCert(const scoped_refptr<ParsedCertificate>& cert,
-                               TrustAnchors* matches) const override;
+  void FindIssuers(const scoped_refptr<ParsedCertificate>& cert,
+                   TrustAnchors* trust_anchors,
+                   ParsedCertificateList* intermediates) const override;
+  bool IsBlacklisted(
+      const scoped_refptr<ParsedCertificate>& cert) const override;
 
  private:
   SECTrustType trust_type_;