Allow the TrustStore interface to return matching intermediates, and identify distrusted certs.

net/cert/internal/path_builder_pkits_unittest.cc

Index: net/cert/internal/path_builder_pkits_unittest.cc
diff --git a/net/cert/internal/path_builder_pkits_unittest.cc b/net/cert/internal/path_builder_pkits_unittest.cc
index a7b02e3c3b7bde9c61ed7a4afb4e841a68e8f2ce..c98502084db47fe94690095f75dc7570cbfd42a3 100644
--- a/net/cert/internal/path_builder_pkits_unittest.cc
+++ b/net/cert/internal/path_builder_pkits_unittest.cc
@@ -74,9 +74,7 @@ class PathBuilderPkitsTestDelegate {
     // TODO(mattm): test with all possible trust anchors in the trust store?
     TrustStoreInMemory trust_store;
 
-    scoped_refptr<TrustAnchor> trust_anchor =
-        TrustAnchor::CreateFromCertificateNoConstraints(certs[0]);
-    trust_store.AddTrustAnchor(std::move(trust_anchor));
+    trust_store.AddTrustAnchor(certs[0]);
 
     // TODO(mattm): test with other irrelevant certs in cert_issuer_sources?
     CertIssuerSourceStatic cert_issuer_source;