Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_audioonly_leaf_anypolicy.pem

+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={audioOnly}
+  Leaf:           policies={anyPolicy}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:f6:c9:53:09:29:9f:0f:b2:8a:f9:79:7c:26:b6:
+                    14:bb:53:9b:96:13:72:bb:e8:04:7a:c2:b4:d3:3d:
+                    44:d4:ee:d5:f0:cc:0e:1b:6d:39:26:02:79:57:41:
+                    26:06:19:0a:72:be:db:db:a0:3a:d1:ab:34:00:9d:
+                    17:06:21:be:e0:26:b6:23:b4:09:d2:8c:c1:4c:57:
+                    d6:67:6a:5f:dd:43:b1:ce:ec:b9:01:fd:c7:a3:90:
+                    0e:8e:6a:d1:ce:83:a0:05:d6:67:c7:be:bf:6e:1c:
+                    bb:ba:40:52:65:5a:4e:84:d1:a9:d1:5a:9c:70:65:
+                    44:05:38:05:73:8e:0f:a4:9f:b3:03:a5:ff:a3:a0:
+                    d8:f1:77:01:d5:ca:9e:77:27:37:7a:9c:ba:75:13:
+                    45:ee:93:57:d3:8d:b8:cc:ea:9f:ff:bf:ca:1f:63:
+                    22:50:13:02:2b:81:a5:d6:4a:21:97:f1:8a:0d:d5:
+                    59:30:0a:f9:b7:f0:6b:c4:16:13:da:af:36:b2:ef:
+                    52:06:eb:b2:11:64:69:ba:64:0f:6d:a6:fe:5a:92:
+                    c9:c7:97:03:0f:4e:7b:f1:f3:af:6b:52:ac:94:3e:
+                    b8:70:7c:eb:5d:b3:04:41:24:3a:b7:ba:cc:4c:44:
+                    90:51:08:07:b9:67:04:44:71:6c:df:ee:fb:55:ed:
+                    32:9d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                B1:D8:81:D5:6B:69:FA:FC:E9:97:E3:E2:9E:74:21:7A:7C:0C:E2:1E
+            X509v3 Authority Key Identifier: 
+                keyid:69:AD:46:2C:89:44:30:3B:CF:B4:E5:C1:46:D9:B6:D0:E9:4B:D9:F0
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         5a:0a:be:50:a0:12:fb:d4:4c:65:d1:c5:d8:14:f7:25:e8:6d:
+         93:14:cc:de:79:9f:b2:74:f3:5f:4a:87:33:11:db:5a:df:83:
+         aa:13:05:ad:0b:92:0f:ba:78:93:ce:0f:2e:cb:d5:cc:cc:b7:
+         f3:48:2d:89:81:ce:62:46:31:65:83:d0:42:df:93:0c:fc:6a:
+         d1:74:6f:f2:8e:28:94:cc:af:0d:0c:ed:29:35:97:f4:dd:87:
+         88:e6:37:ba:b8:b4:fe:16:20:5d:a4:9f:2c:13:6e:35:41:74:
+         8d:bd:83:ae:52:25:17:a0:07:26:e9:98:ec:c0:b7:46:18:9e:
+         a9:62:04:14:53:91:b9:7b:5a:27:92:b9:e8:46:e7:28:8f:51:
+         72:4d:36:51:54:12:e3:eb:4b:bb:28:1d:18:d8:88:2b:04:f9:
+         de:4a:45:b2:30:69:73:79:05:90:8c:b1:b4:48:c5:d3:e9:f2:
+         01:82:34:ca:e9:10:bc:ca:bc:aa:b9:08:16:a1:d3:6d:8a:b5:
+         67:bd:e1:3c:1b:fb:26:a0:f7:f4:ae:ac:1a:e1:7c:b0:b7:90:
+         6f:4c:f3:e0:00:83:2f:7b:ba:b5:36:3b:ab:71:b7:b5:79:db:
+         50:f7:48:89:94:86:af:fe:3e:32:7a:91:d4:fb:4b:10:b0:9f:
+         cc:6f:a4:9c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 6 (0x6)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:a8:13:59:fd:9e:9b:cb:c9:02:2c:44:ff:d7:e7:
+                    1d:10:62:8b:db:1d:ed:85:0b:c4:0c:01:7b:71:54:
+                    e6:83:a3:56:e3:39:cb:52:0e:5a:25:97:55:82:47:
+                    46:e6:c1:8d:24:09:c0:ae:44:f1:b7:e8:6c:b3:4f:
+                    81:b2:32:31:36:b4:92:21:d7:f3:bd:d4:2e:90:43:
+                    09:49:20:91:b7:dd:3e:eb:54:03:b4:8a:b0:f3:1c:
+                    44:04:82:f8:b1:65:ae:24:57:47:87:af:9d:a2:21:
+                    4a:3b:6b:36:66:1e:cf:af:cb:be:b7:5c:85:a1:22:
+                    c1:f0:a0:6c:d7:f7:d7:33:ec:86:f0:32:2f:91:5d:
+                    70:fc:a1:3d:7c:7b:4d:7f:3e:8a:ef:ef:3f:18:c9:
+                    5a:bd:b0:01:fd:a1:2c:f9:e8:80:a1:43:07:c8:b2:
+                    c0:ed:70:47:b6:46:65:90:53:49:00:e7:f8:43:68:
+                    ed:02:27:89:f8:d5:b8:0d:97:6b:1a:c1:37:71:e2:
+                    85:bb:db:3b:8b:f6:82:a4:5c:da:6a:a0:e5:4c:1b:
+                    09:50:3e:28:a4:ad:e6:86:95:6a:c7:b5:21:ed:aa:
+                    29:ad:64:9b:94:0a:44:ec:7d:45:fc:9f:3d:7a:8c:
+                    65:21:eb:45:f2:d3:49:98:fd:0f:69:f0:3b:f9:c8:
+                    f3:33
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                69:AD:46:2C:89:44:30:3B:CF:B4:E5:C1:46:D9:B6:D0:E9:4B:D9:F0
+            X509v3 Authority Key Identifier: 
+                keyid:82:D5:80:DD:3D:8B:A3:17:84:E6:C1:77:1A:72:12:B7:0B:3A:11:DF
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.11129.2.5.2
+
+    Signature Algorithm: sha256WithRSAEncryption
+         c0:7b:5c:a8:bd:53:58:86:46:19:a5:bd:4a:0c:29:35:f1:3f:
+         77:23:52:87:b3:d1:79:16:51:14:bc:1b:37:33:be:96:86:37:
+         c9:9e:43:a8:3b:7e:80:45:22:e0:00:79:d9:01:ba:f6:fa:91:
+         05:11:a3:0c:ce:27:48:fb:1d:45:1f:fc:eb:9a:3d:be:c2:0e:
+         9c:42:ba:6c:68:6e:96:56:e9:81:b8:65:34:68:7e:84:f6:eb:
+         cc:67:b1:00:4b:8d:9e:19:89:be:29:c8:7f:9b:78:f6:50:68:
+         88:c4:c3:82:40:76:87:7e:34:a3:16:58:9a:84:bf:0d:23:79:
+         24:97:c8:34:59:71:d5:28:99:ed:a3:10:71:a0:08:1e:01:23:
+         60:58:95:b6:c4:00:7e:6d:f3:e8:59:9f:fd:92:05:ed:da:e0:
+         b5:e3:6f:46:cc:6f:1f:ee:d4:21:4d:19:18:85:1d:ae:e6:9e:
+         04:21:6c:fe:d7:b0:8a:15:54:30:3d:16:c3:97:70:67:c8:51:
+         3b:a8:42:fa:85:b1:14:54:c8:43:ba:4c:8c:cf:88:87:f3:29:
+         55:7e:51:5d:ef:19:4b:9e:0a:92:e5:09:29:8a:d3:2e:9e:26:
+         2d:87:17:23:ff:93:7d:a6:64:fb:3a:8f:56:99:31:8a:8a:b9:
+         09:4b:1d:c0
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 5 (0x5)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:de:c6:19:7e:66:50:27:4f:e1:53:c8:c1:db:27:
+                    48:07:35:5d:51:84:f0:8e:62:64:9b:6f:b0:25:76:
+                    e7:d5:e3:c2:2a:57:5a:11:9d:93:e6:97:e1:bb:24:
+                    77:88:e4:bd:65:d9:07:a4:7d:12:67:18:19:e3:ab:
+                    41:85:4b:39:54:d7:bc:36:8b:e5:69:b6:38:8e:e1:
+                    3a:c2:8c:61:08:34:db:0a:43:fb:1c:0b:ff:ed:fe:
+                    8c:65:8d:76:00:8c:0b:9c:f8:51:f4:e6:e2:cf:07:
+                    23:b1:95:30:b7:c7:e4:b8:4f:29:54:81:c3:9a:af:
+                    7e:43:59:85:56:57:8e:3d:9c:ec:e4:f0:a5:c6:bd:
+                    fa:d5:f5:19:eb:b1:90:f6:86:ae:80:f9:2b:c0:d3:
+                    a2:87:59:97:c6:36:a6:ab:4a:60:31:ba:c6:35:72:
+                    30:29:3c:14:54:6b:1a:5b:72:f0:3a:eb:22:2e:d3:
+                    44:38:c2:f3:c8:f3:cc:32:45:71:f8:a3:98:dc:4e:
+                    0b:0a:f4:31:c9:31:58:1b:fa:d3:d7:73:95:05:59:
+                    6d:73:32:dd:97:2f:fd:89:e0:0f:49:a0:16:8e:f0:
+                    c8:91:88:d6:08:2d:44:82:17:07:12:57:fb:f6:76:
+                    b3:d7:09:33:29:f4:24:34:33:a3:c9:b3:33:be:4b:
+                    85:bb
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                82:D5:80:DD:3D:8B:A3:17:84:E6:C1:77:1A:72:12:B7:0B:3A:11:DF
+            X509v3 Authority Key Identifier: 
+                keyid:82:D5:80:DD:3D:8B:A3:17:84:E6:C1:77:1A:72:12:B7:0B:3A:11:DF
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         24:50:5b:fc:90:33:66:c4:43:81:73:1e:23:c6:da:63:06:4f:
+         12:ee:7d:0e:a2:1e:01:66:a4:db:b4:0d:a1:45:be:4e:ed:e2:
+         6d:22:bc:60:e5:18:8f:21:b5:bf:56:d5:f4:1b:de:1f:c1:18:
+         f1:d1:a7:88:62:3c:79:d0:aa:08:7e:65:be:09:83:70:f2:27:
+         3c:48:8d:5e:59:eb:cc:c7:3a:f8:f4:81:e0:af:95:53:1b:dc:
+         44:af:f0:f6:cd:cd:0f:d1:d3:9c:4c:f3:b3:48:68:ef:b3:5d:
+         c4:33:5c:ea:08:7d:00:75:78:07:c4:86:b6:a2:45:86:3f:20:
+         ee:47:4e:c3:2b:70:a5:09:cc:69:af:db:0b:ce:6d:b5:79:7e:
+         9c:fd:8f:db:11:96:19:19:85:10:76:c3:ca:e8:db:98:02:bd:
+         3d:40:ac:21:4a:70:0e:cb:3f:02:f2:11:1e:fa:da:90:ac:1b:
+         f7:c8:3e:ec:32:c7:97:01:a7:9d:94:db:ed:65:dd:5f:6c:da:
+         5a:a9:5f:63:0e:1a:84:82:e4:63:32:75:79:ca:23:dc:17:02:
+         13:65:1c:b0:e8:70:5a:62:25:36:24:f6:5e:47:ed:3f:d7:42:
+         16:ee:59:96:80:bb:e1:7d:31:9d:e3:00:b2:8b:9e:da:89:e5:
+         d5:60:f4:9b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----