Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_foo.pem

+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={anyPolicy}
+  Leaf:           policies={foo}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 12 (0xc)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e9:db:75:48:f4:dd:0f:37:9a:8e:72:10:80:aa:
+                    7c:80:08:d2:ab:a2:1d:28:df:78:9c:52:72:c1:b9:
+                    7d:e0:03:a5:53:e9:70:96:0a:be:b9:9e:c0:f7:3e:
+                    23:33:15:42:66:5d:64:13:c0:7a:23:6d:7f:71:13:
+                    c3:bd:da:d1:39:11:38:1e:91:bc:b3:f8:cb:90:9d:
+                    fd:a6:b2:90:cb:fa:1b:70:11:a5:b4:03:25:78:dc:
+                    d2:f6:1e:64:74:9b:2c:f4:3d:13:b2:ef:7e:8f:c4:
+                    ad:98:8b:0b:df:1c:08:f5:34:9f:78:ca:35:52:b5:
+                    1c:b4:fc:f8:60:d7:ef:b4:74:1c:93:f1:80:87:3a:
+                    84:ac:43:2e:ce:a2:00:07:83:7e:6d:03:b5:2e:53:
+                    c3:9c:ee:88:12:af:50:5c:42:e3:46:12:f1:20:10:
+                    a3:fc:90:07:d7:29:04:9b:f6:50:9b:ff:3e:27:0b:
+                    29:e4:e4:d6:f9:00:46:82:c6:2a:63:11:9a:b9:6c:
+                    fd:e1:fc:34:48:60:9b:8d:7e:3a:4c:ce:ee:28:2d:
+                    25:63:8d:07:43:69:3c:fa:d7:3c:bd:5d:40:b7:d7:
+                    da:f2:74:ef:d3:00:bf:ac:3b:75:a0:0e:ae:52:63:
+                    3c:45:fa:e2:10:82:2b:c9:0f:02:18:c6:c6:09:02:
+                    e6:f7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                94:8A:74:F5:0F:9F:53:34:47:02:B5:04:8D:45:57:79:9B:98:7B:27
+            X509v3 Authority Key Identifier: 
+                keyid:9C:53:7F:7A:7F:4E:F2:C0:A5:1A:96:FB:9E:8D:08:DC:DD:73:92:61
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.2.840.113554.4.1.72585.2
+
+    Signature Algorithm: sha256WithRSAEncryption
+         04:86:bc:a3:cc:94:a3:b5:97:a6:ca:b4:21:d6:f9:37:f7:b1:
+         ed:d0:4a:43:ff:93:ec:42:62:05:1d:11:df:18:94:c2:fc:63:
+         ad:0b:db:f4:cc:8a:7c:e9:69:29:b3:df:7c:a5:79:31:01:6a:
+         fc:18:6f:fd:5b:f9:11:68:53:0b:78:53:1a:08:6f:5a:33:72:
+         30:25:76:21:45:fb:a2:79:d5:d9:f7:60:1b:3b:cd:21:3d:66:
+         72:73:4a:fa:cd:86:13:54:ca:44:87:97:55:ec:dc:dc:76:24:
+         9e:43:17:ad:f9:2c:29:bc:4a:b3:01:95:bb:83:a6:d0:fa:c6:
+         7d:d8:1d:7d:66:95:b7:fd:80:60:dd:8d:02:8c:80:cb:57:4f:
+         c1:7a:8f:2c:34:1e:5c:08:4f:76:a6:42:c2:66:39:24:5b:46:
+         12:f0:6e:30:51:be:27:03:be:69:f5:b3:b7:6f:25:7e:0b:c8:
+         52:48:90:12:59:54:5a:07:32:2b:3b:a7:13:31:92:5f:c2:5c:
+         61:90:d9:70:04:e6:6f:7f:fa:ec:36:a5:6a:38:49:8d:a2:51:
+         e0:68:b3:c9:f6:c7:3a:99:7f:89:a5:17:d5:1b:fd:39:13:51:
+         2d:26:8f:33:a8:61:86:d8:fe:b4:d4:d7:69:26:bb:4c:b1:a8:
+         cb:4b:a3:6f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 24 (0x18)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c0:06:6e:cf:e3:c9:e6:4a:99:bf:9d:a9:cc:42:
+                    b0:e3:95:f4:5c:16:5d:6c:c3:3b:7b:65:f9:68:27:
+                    07:75:e9:60:fc:c5:1e:37:71:05:e6:f4:c4:8e:76:
+                    cf:dd:b3:7a:dd:14:d4:4c:96:1a:5f:b4:c5:04:9a:
+                    32:e6:f7:16:4c:38:4a:99:e5:3a:24:85:c3:06:bc:
+                    c1:9e:4c:ac:6b:14:9d:49:8c:ec:cd:9a:43:60:09:
+                    d8:d0:81:8f:a3:b9:9f:e8:13:fb:69:95:27:7b:fe:
+                    6a:d8:9e:42:4b:96:47:ee:1c:69:c6:5a:d7:28:a4:
+                    c2:91:46:bf:7a:c6:69:12:96:c8:68:fa:46:cf:fb:
+                    92:ca:12:a7:7a:58:39:6f:d1:26:07:2a:59:c5:fb:
+                    86:94:33:45:65:04:55:c4:a5:0c:da:e5:56:30:0d:
+                    46:32:ce:fe:9b:00:2d:3f:24:64:81:c2:f2:3f:f5:
+                    af:71:1d:0e:69:ae:5e:43:28:e5:98:65:b7:16:ee:
+                    42:13:26:9d:a5:db:21:aa:85:1b:38:12:eb:f0:0a:
+                    93:ef:eb:5c:56:0d:cf:4a:13:4b:03:64:03:59:d9:
+                    59:05:f8:e0:79:49:68:44:98:ad:41:a7:9a:d3:9a:
+                    0b:74:73:79:b7:84:14:f6:b6:40:0f:68:1e:be:94:
+                    50:59
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                9C:53:7F:7A:7F:4E:F2:C0:A5:1A:96:FB:9E:8D:08:DC:DD:73:92:61
+            X509v3 Authority Key Identifier: 
+                keyid:02:F4:E3:B3:B5:C8:56:E5:72:02:9D:7A:97:A4:73:0A:88:EF:9C:40
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         4f:f7:81:68:2c:99:55:0d:b9:0c:cb:18:bf:cd:c9:a3:1d:05:
+         3e:53:e2:87:0e:94:20:6c:c9:77:4e:25:a0:f3:de:a2:52:3c:
+         2a:4d:31:dc:d5:fc:19:bf:d9:d8:18:88:bf:9a:ff:9f:71:18:
+         25:da:91:49:52:fc:d0:14:e0:97:cc:78:dd:4c:3f:4e:35:c8:
+         57:12:40:a0:ac:1f:81:93:50:db:1b:17:be:e8:76:51:e8:e9:
+         2d:2b:28:eb:cb:23:a7:58:b0:b4:53:f2:21:ef:6e:5d:a6:d3:
+         36:92:da:90:cf:c4:fd:0b:4d:26:88:05:2a:6d:22:48:d2:4e:
+         5f:3a:e0:ee:1a:70:a8:ab:58:ec:24:b4:61:84:f9:f0:8d:f4:
+         93:38:49:f0:d2:14:ba:7d:ca:9e:04:a4:02:7e:e0:1e:9e:40:
+         c5:04:4a:69:fc:9e:fd:9b:2c:e1:c5:1f:ad:95:45:92:bd:38:
+         74:07:2a:1f:cf:91:b3:f1:5a:88:d1:ca:97:1e:8f:6d:62:86:
+         b6:71:93:6f:d4:84:5c:fe:bb:56:d1:5c:01:0b:f0:1f:d5:27:
+         a3:8b:cd:8d:aa:ae:d7:ed:fc:c0:c9:30:89:7a:d2:34:d5:98:
+         ef:a7:44:4c:f9:8d:bd:6b:6c:6b:7c:a5:36:d0:f6:07:47:9f:
+         c3:d2:07:f5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 23 (0x17)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a5:3e:c8:1f:15:65:7f:e7:ab:7e:07:f3:8e:4d:
+                    07:09:61:1c:db:01:f6:0c:7b:b2:a9:c5:49:c4:ae:
+                    f6:d9:bc:b5:7d:36:0e:c2:7d:de:38:cd:97:a5:ca:
+                    9a:9c:c9:e7:21:83:50:0f:89:98:e2:ce:2b:44:48:
+                    ff:3a:05:1d:b2:9e:6a:3e:3b:40:d9:78:bf:97:52:
+                    df:62:5d:59:2d:f0:bd:54:f7:21:fb:21:02:fd:38:
+                    af:d7:2b:42:16:db:d6:a3:58:9c:a6:4f:85:75:58:
+                    6f:aa:c3:e3:8e:59:eb:c3:49:ba:99:c9:ba:03:74:
+                    ca:e7:26:d8:1d:5c:2a:c1:f7:a8:3c:31:5b:20:b5:
+                    9e:ec:7d:a8:00:cd:f7:6e:5a:57:42:fd:49:66:39:
+                    bb:55:95:38:64:51:3a:13:59:86:0e:f2:db:49:07:
+                    eb:02:84:00:95:4d:23:b3:72:10:8d:f3:a1:6b:34:
+                    68:63:97:0f:69:18:80:4f:ae:d4:f4:a1:f3:21:62:
+                    74:04:7a:07:0b:e3:61:cf:ff:07:75:27:78:0a:4e:
+                    e3:e5:a2:51:9c:2f:d1:04:3c:7a:1c:0e:b3:bb:e7:
+                    db:10:67:c8:c1:af:ce:9a:57:35:77:22:3c:48:fe:
+                    31:9b:7d:95:5e:e1:3d:32:99:9d:97:85:a4:7b:fd:
+                    1f:5d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                02:F4:E3:B3:B5:C8:56:E5:72:02:9D:7A:97:A4:73:0A:88:EF:9C:40
+            X509v3 Authority Key Identifier: 
+                keyid:02:F4:E3:B3:B5:C8:56:E5:72:02:9D:7A:97:A4:73:0A:88:EF:9C:40
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         9a:7a:13:1c:1e:b6:30:f4:70:d0:47:ce:e6:31:fe:63:ae:08:
+         aa:8e:91:14:1f:1a:08:1b:c3:0e:e5:06:72:cd:28:df:16:73:
+         98:9b:25:78:7c:61:05:6c:68:09:7e:33:9c:49:7e:7c:d2:53:
+         fa:f2:fe:fc:59:8a:2d:04:66:1e:0f:91:98:08:2a:ea:fd:23:
+         22:5d:4b:1e:e3:e9:1a:4f:1d:3d:d0:49:13:af:d8:83:4e:8b:
+         10:da:1b:b6:82:a3:4f:cb:ff:f4:28:2d:a6:88:63:07:db:72:
+         13:fd:e7:c7:e9:77:1d:40:56:39:64:84:24:a8:20:dc:e1:f2:
+         e3:ad:ef:07:03:66:e8:3b:5d:30:82:ba:50:9c:b0:82:c1:14:
+         dd:23:9f:ea:56:02:77:63:56:e3:f4:5f:ef:05:cc:5e:cb:8f:
+         3e:4d:c2:10:8d:e2:82:2f:52:91:d9:d0:d2:c1:6b:56:d2:f2:
+         0c:b8:47:c8:52:69:ba:ce:fa:7d:f7:d5:dd:5d:cc:15:ef:9d:
+         73:1b:6e:6d:ab:76:96:8a:06:94:68:6b:ea:36:44:54:66:66:
+         05:40:1d:31:05:03:2a:78:10:cf:fa:90:dd:eb:9d:61:b5:3c:
+         e5:ec:8e:39:6b:1b:c5:1b:0c:cc:6a:3e:86:d8:ea:6e:d9:5a:
+         d1:8e:ea:a3
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----