Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_anypolicy.pem

+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={anyPolicy}
+  Leaf:           policies={anyPolicy}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 11 (0xb)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bc:42:b8:af:d7:ce:53:49:1d:f9:fd:41:b0:ce:
+                    40:7a:c1:5d:79:db:a8:9d:6b:7b:f9:ef:8d:b8:f4:
+                    22:e3:80:f9:5c:67:e1:91:a0:66:c2:d7:07:0a:ef:
+                    ed:86:ab:c0:9e:d0:b1:95:cf:83:9b:ce:7b:0c:75:
+                    05:8c:2f:44:e4:2f:ba:d8:17:04:ec:37:a2:6f:20:
+                    66:d9:09:a9:20:e2:43:d8:d4:77:26:82:ec:a7:ca:
+                    48:2b:19:73:73:fd:4b:d4:a6:38:e3:ea:6e:d7:02:
+                    cd:18:e6:bd:c2:c6:9a:bf:ec:1f:ce:b0:e9:03:eb:
+                    03:65:cd:e2:46:ad:a3:c1:4d:23:b3:d1:b1:52:e2:
+                    5d:56:dc:bd:21:35:17:4b:65:e9:3b:e8:9a:f5:7b:
+                    30:74:3f:da:e7:5a:8b:4e:74:53:56:db:f2:15:f6:
+                    7d:bb:20:f0:fd:e5:bb:8b:a3:7d:10:f3:f2:d1:76:
+                    d6:99:fc:0b:29:cb:bc:ec:dd:ed:85:54:01:a2:07:
+                    96:ce:7e:24:ee:1b:12:2e:e0:65:8f:3d:de:e2:75:
+                    64:a1:2f:1c:43:dd:d1:e9:6f:80:58:b0:11:d6:8a:
+                    76:48:b5:60:38:7e:c0:52:7a:4a:6d:7d:b4:c2:4b:
+                    d8:d2:f8:27:8a:88:54:f2:05:a0:65:12:ff:26:27:
+                    bc:bb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                63:5A:64:7F:7A:5B:13:1C:41:A8:00:23:5D:9E:D5:4E:86:22:FC:56
+            X509v3 Authority Key Identifier: 
+                keyid:29:2B:35:96:F9:DF:46:CD:68:36:D9:20:F1:95:F7:40:FB:C6:58:33
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         0c:f9:f7:0f:75:d6:67:f3:5b:a1:3a:3a:20:8b:d3:3a:f6:14:
+         f8:ac:89:22:2e:36:03:d3:7f:3f:bc:19:9f:2d:b7:c4:c9:99:
+         3d:85:10:a7:ca:d6:d5:97:56:8d:56:f1:98:d8:43:29:b2:87:
+         3c:6d:6f:52:00:8c:1d:3a:04:2b:f5:7b:75:40:7c:01:79:22:
+         00:10:48:a4:27:b6:30:b9:29:2b:14:de:cc:bf:f4:1e:cc:8c:
+         7f:6e:97:18:cf:03:f6:5d:ea:d1:47:2c:e8:78:73:31:e8:48:
+         c8:54:76:f6:b1:5b:a2:70:7e:8f:7f:12:2d:fa:2f:fd:d8:97:
+         34:90:fb:d4:2a:d3:3c:65:cc:25:1b:b0:d9:b9:8e:2e:e2:9a:
+         31:ce:4e:2f:df:7e:ee:0e:da:a0:3b:cd:12:8a:0d:6b:e0:10:
+         81:25:8e:25:25:a0:91:7a:e2:a5:ee:aa:d1:8f:cf:03:ca:d5:
+         45:1d:a2:14:67:7d:ac:cb:d9:1d:0a:af:e0:e9:b6:e9:53:27:
+         b7:63:bf:59:00:fb:8d:bc:17:00:fb:92:74:30:9c:f8:86:bf:
+         2f:94:73:32:af:95:a7:12:96:bf:37:6a:d7:9d:87:1e:17:27:
+         41:a7:6a:bc:9b:fa:ae:12:b3:ec:96:3c:5e:62:80:4f:3c:e7:
+         9f:a4:0a:ed
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 22 (0x16)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cc:f0:0a:27:5e:f1:ca:c1:d3:fd:33:14:dc:25:
+                    7a:49:89:89:c5:67:fd:e4:56:aa:2b:1b:40:80:84:
+                    b8:48:7e:ed:66:4c:23:82:99:5b:86:db:fc:82:35:
+                    b3:56:01:bf:01:14:f6:46:5d:c7:96:5d:55:a7:a7:
+                    e7:5c:8d:a7:c9:e9:a2:20:e4:ad:4c:8c:fe:2e:17:
+                    59:56:8d:ed:7c:97:68:5a:0d:dd:b1:41:b7:24:44:
+                    bc:77:84:f1:af:fe:87:1c:83:c7:10:72:8a:44:62:
+                    99:a0:5c:78:f0:28:73:bf:2c:de:d1:8e:69:01:b6:
+                    5a:39:20:2c:d9:fe:11:5f:09:27:5d:ff:2a:98:9a:
+                    a8:6b:6a:e4:40:27:0d:b7:a7:2d:85:fa:7d:7a:08:
+                    d4:bb:9f:ff:27:e8:3a:d4:f5:15:a0:40:4f:c1:11:
+                    13:26:d7:1b:39:96:12:b7:19:aa:73:5c:4c:f7:ea:
+                    d0:95:4d:14:a4:aa:73:63:58:8f:fe:e0:5a:83:31:
+                    7f:34:aa:02:e1:d9:6c:ed:84:7b:7f:ec:6b:7e:d9:
+                    3f:65:98:87:28:18:d5:aa:0f:d5:2f:ec:1a:86:19:
+                    ed:3c:c6:a1:10:4a:fd:ac:60:6a:7a:ff:6a:66:c4:
+                    99:49:67:7c:3f:37:32:eb:80:48:e5:0b:6a:1d:3d:
+                    6a:47
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                29:2B:35:96:F9:DF:46:CD:68:36:D9:20:F1:95:F7:40:FB:C6:58:33
+            X509v3 Authority Key Identifier: 
+                keyid:FF:6B:55:E3:48:07:3A:7D:A5:37:EE:4C:93:43:81:21:0E:CD:5F:D0
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         1a:0b:d3:2f:32:36:12:5e:be:00:85:07:03:11:d9:af:0e:54:
+         fe:c6:02:a0:f3:40:e3:4e:7d:52:b3:8b:24:75:c9:9e:de:0c:
+         a3:30:6e:8d:1f:e4:ea:cc:97:96:5e:b3:ad:78:34:99:05:d1:
+         69:99:09:fd:e3:3a:0c:ab:df:d0:7b:61:9d:af:da:71:96:8d:
+         6d:26:da:16:bd:54:f8:e9:12:7e:e6:1b:f6:d2:d3:69:a4:ba:
+         1f:4f:5c:8c:66:d7:2f:42:79:51:98:6e:55:4c:da:2a:d2:7d:
+         48:22:bc:33:65:d1:87:6b:df:f9:c7:7a:55:db:70:25:4f:14:
+         ef:15:07:aa:93:41:99:2c:f7:37:8f:e5:0f:73:41:05:18:d5:
+         f0:8a:e7:3e:4f:89:fa:a5:4d:86:16:12:63:6c:11:95:d0:a6:
+         81:d2:63:68:51:0a:ae:8b:2c:17:24:32:3a:44:57:fc:a8:0f:
+         d3:5f:95:ca:24:6e:ee:03:85:54:95:3d:42:4a:b0:ed:7e:4e:
+         d5:2c:e7:e0:73:90:72:aa:6b:b6:2a:9a:65:6b:ce:c1:1d:1e:
+         46:d0:a9:f5:7a:83:89:41:3c:e4:19:8b:b7:2a:93:23:d7:fb:
+         c5:a5:3f:4e:8d:7b:ec:d2:4f:b9:a9:4d:2b:f9:b5:7b:bb:a2:
+         66:51:a2:56
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 21 (0x15)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:be:a1:75:40:5a:14:73:94:76:9e:7d:38:ff:ed:
+                    a8:db:dc:94:ad:5e:90:c1:fa:4f:c6:8f:5c:0d:17:
+                    fd:08:d4:34:2d:4a:1d:b7:a3:bc:88:ae:f0:fc:7a:
+                    bb:ea:fe:c8:e6:4f:5b:64:bc:0c:f8:64:01:cc:ae:
+                    82:68:69:d5:b0:fb:a5:31:01:ba:5d:f9:6d:85:c2:
+                    b1:c9:da:1c:84:01:24:dc:bb:de:52:54:f2:a2:a4:
+                    0e:25:d8:c1:07:7f:e9:80:1a:1f:f8:7e:6b:d0:1f:
+                    c3:6d:1e:69:0e:eb:dc:07:ad:e4:92:d8:34:7d:11:
+                    19:27:ea:e1:ef:54:92:ae:2d:34:8e:80:06:84:2e:
+                    3e:b3:63:06:63:c2:db:88:7b:2a:f2:67:63:e3:d3:
+                    31:cb:4a:05:6f:c3:85:8c:00:4a:c1:1a:0b:cb:c4:
+                    90:fa:db:1d:97:b2:33:5a:86:b4:81:9b:48:f1:ca:
+                    59:88:cf:c7:05:fd:18:75:a9:c3:7f:20:7a:aa:25:
+                    ec:a4:db:1f:ea:76:b2:f7:a5:2d:57:90:ab:e7:de:
+                    fe:d1:d7:71:8e:2b:46:64:7c:e3:8c:ab:88:84:7d:
+                    64:3e:39:0f:8a:ab:99:7d:5a:63:08:1d:28:49:45:
+                    6e:99:4f:f6:b9:86:bb:d1:46:6c:97:ec:36:29:5a:
+                    bc:15
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                FF:6B:55:E3:48:07:3A:7D:A5:37:EE:4C:93:43:81:21:0E:CD:5F:D0
+            X509v3 Authority Key Identifier: 
+                keyid:FF:6B:55:E3:48:07:3A:7D:A5:37:EE:4C:93:43:81:21:0E:CD:5F:D0
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         34:45:fc:7c:c8:38:e2:42:87:f6:de:f2:07:ad:9a:94:ce:af:
+         e7:09:2e:05:68:4f:25:01:1b:ae:0c:c9:55:21:42:55:02:42:
+         02:83:af:cf:72:44:96:28:e9:43:e2:bc:53:38:67:f9:20:44:
+         13:76:20:23:a5:3d:a1:8a:6d:bc:33:25:26:24:6f:ca:58:c6:
+         26:ac:ad:cb:69:79:44:3d:01:fb:2f:6f:23:47:da:89:af:0b:
+         22:1e:06:27:ea:08:b5:11:38:59:9d:87:19:b2:51:3c:22:ec:
+         c2:b1:e3:f4:6c:65:4a:ff:0d:a7:23:40:e7:d8:f3:3b:75:a1:
+         36:bb:e0:aa:88:5d:14:cd:a5:6e:47:4b:09:e7:fb:12:d4:4e:
+         31:e2:ff:58:ed:bd:06:2e:c2:27:8f:1e:bb:14:24:cf:23:9a:
+         63:97:f7:c4:0b:98:98:2c:c4:58:a1:00:d1:32:74:7f:17:4f:
+         f5:bd:93:c2:4a:db:06:d3:91:16:4a:1b:72:c2:80:3a:e3:8b:
+         ca:8f:d7:49:1c:7b:76:6d:42:cb:97:af:fa:36:74:b1:5f:0a:
+         0a:3a:c5:bd:6d:d7:2c:8a:d1:c8:cf:c2:b1:89:ed:0d:9a:6d:
+         a1:e8:d1:3b:1c:67:1b:26:10:3f:93:d2:1f:87:a4:69:1f:77:
+         40:08:74:eb
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----