Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_audioonly_leaf_audioonly.pem

+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={audioOnly}
+  Leaf:           policies={audioOnly}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d0:0b:d7:3e:98:8e:bb:3e:3c:0b:89:5d:95:79:
+                    a7:6a:14:3e:6b:b2:0c:02:01:25:51:9d:3a:fc:ea:
+                    b7:ee:d1:5d:e6:c1:c1:59:a9:e3:59:10:d3:04:6a:
+                    a4:ab:33:f0:e6:cf:70:44:a6:14:88:5f:dd:63:b6:
+                    b7:d6:ce:4b:bd:05:3f:61:7a:6d:01:5a:38:4b:64:
+                    a3:63:d0:1b:7c:7a:37:ab:eb:a8:5b:e0:50:e6:5f:
+                    f5:90:20:8d:76:51:5a:2b:82:4c:60:89:7d:f7:df:
+                    d2:6d:e4:e3:65:63:13:65:90:13:91:d7:c2:f6:61:
+                    82:b2:4d:cc:db:47:e3:f6:cd:c4:62:f9:95:36:04:
+                    cd:19:85:54:a6:8e:5c:28:0f:0d:22:13:d7:8d:16:
+                    1d:1a:68:7a:40:d6:c8:0f:e8:60:c8:fe:16:fe:45:
+                    e1:e4:a8:b8:b8:e5:fb:40:51:2a:70:e0:de:62:35:
+                    78:b6:70:59:f6:7b:a2:7c:03:9c:69:8b:29:a5:3b:
+                    fd:b9:89:ec:58:3b:c5:2e:71:f7:d5:bb:48:b3:8b:
+                    92:1a:a6:8a:33:1e:b7:55:c5:ff:d7:e9:f1:ef:e4:
+                    d8:67:ae:58:51:18:66:24:f1:1b:12:1f:a1:90:f7:
+                    d0:ba:4d:cb:a4:9e:af:ec:6d:b1:a9:f6:f2:2d:fe:
+                    41:01
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                49:8A:C6:9F:50:B0:1A:C4:63:BF:03:F3:E8:D1:62:7B:4F:8E:8E:6E
+            X509v3 Authority Key Identifier: 
+                keyid:1A:DF:4D:09:A0:4D:8D:18:9E:B2:43:6B:AF:D5:99:96:0D:C6:6E:0A
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.11129.2.5.2
+
+    Signature Algorithm: sha256WithRSAEncryption
+         1b:08:f3:4d:5a:ab:a0:3a:39:fd:08:5e:bf:d1:02:07:92:af:
+         79:8b:5d:c5:67:df:cc:53:77:4a:98:84:62:13:19:e1:83:61:
+         c8:f6:4e:5c:34:1b:98:49:82:24:d0:13:77:be:08:87:22:02:
+         3e:54:aa:a0:dc:ff:ac:50:09:98:98:e7:f5:b0:e6:53:29:71:
+         62:82:95:6b:37:cd:01:a4:42:aa:6b:80:c1:70:d7:66:6c:c6:
+         21:7f:7c:b0:c3:71:44:ad:ca:68:db:04:cd:ef:a5:18:75:e4:
+         12:40:b1:05:47:c9:bc:86:fb:a4:2f:bf:eb:5a:3b:ff:ff:99:
+         8b:2a:6f:20:0a:dc:6e:ad:79:cc:b0:aa:46:a0:d6:3c:90:b7:
+         c6:36:99:03:e1:ca:d2:39:5f:69:c9:e5:eb:c9:03:05:85:d8:
+         c2:6f:b8:75:a2:e2:77:3c:c6:24:dd:84:78:9e:b4:0e:a3:00:
+         3d:50:bc:9d:5f:62:b9:75:46:3b:66:42:fd:85:93:fc:1c:41:
+         c7:e2:58:07:cd:ba:27:3c:58:92:7f:6f:60:e4:9c:68:cb:8d:
+         3d:a9:f6:ad:e3:4d:17:e5:ff:c3:9f:7a:c1:96:7a:a2:99:79:
+         7a:2d:ce:9d:49:59:20:6e:89:f9:6e:17:aa:97:44:1d:ed:28:
+         c2:8d:48:0c
+-----BEGIN CERTIFICATE-----
+MIIDmjCCAoKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxJbnRl
+cm1lZGlhdGUwHhcNMTUwMTAxMTIwMDAwWhcNMTgwMTAxMTIwMDAwWjAPMQ0wCwYD
+VQQDDARMZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AvXPpiO
+uz48C4ldlXmnahQ+a7IMAgElUZ06/Oq37tFd5sHBWanjWRDTBGqkqzPw5s9wRKYU
+iF/dY7a31s5LvQU/YXptAVo4S2SjY9AbfHo3q+uoW+BQ5l/1kCCNdlFaK4JMYIl9
+99/SbeTjZWMTZZATkdfC9mGCsk3M20fj9s3EYvmVNgTNGYVUpo5cKA8NIhPXjRYd
+Gmh6QNbID+hgyP4W/kXh5Ki4uOX7QFEqcODeYjV4tnBZ9nuifAOcaYsppTv9uYns
+WDvFLnH31btIs4uSGqaKMx63VcX/1+nx7+TYZ65YURhmJPEbEh+hkPfQuk3LpJ6v
+7G2xqfbyLf5BAQIDAQABo4H4MIH1MB0GA1UdDgQWBBRJisafULAaxGO/A/Po0WJ7
+T46ObjAfBgNVHSMEGDAWgBQa300JoE2NGJ6yQ2uv1ZmWDcZuCjA/BggrBgEFBQcB
+AQQzMDEwLwYIKwYBBQUHMAKGI2h0dHA6Ly91cmwtZm9yLWFpYS9JbnRlcm1lZGlh
+dGUuY2VyMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly91cmwtZm9yLWNybC9JbnRl
+cm1lZGlhdGUuY3JsMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD
+AjAXBgNVHSAEEDAOMAwGCisGAQQB1nkCBQIwDQYJKoZIhvcNAQELBQADggEBABsI
+801aq6A6Of0IXr/RAgeSr3mLXcVn38xTd0qYhGITGeGDYcj2Tlw0G5hJgiTQE3e+
+CIciAj5UqqDc/6xQCZiY5/Ww5lMpcWKClWs3zQGkQqprgMFw12ZsxiF/fLDDcUSt
+ymjbBM3vpRh15BJAsQVHybyG+6Qvv+taO///mYsqbyAK3G6tecywqkag1jyQt8Y2
+mQPhytI5X2nJ5evJAwWF2MJvuHWi4nc8xiTdhHietA6jAD1QvJ1fYrl1RjtmQv2F
+k/wcQcfiWAfNuic8WJJ/b2DknGjLjT2p9q3jTRfl/8OfesGWeqKZeXotzp1JWSBu
+ifluF6qXRB3tKMKNSAw=
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 4 (0x4)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cb:9b:d4:8f:6f:27:f3:b7:4d:01:80:93:70:2a:
+                    c0:14:26:ae:44:a8:0e:e7:3e:2f:fb:f8:07:4b:79:
+                    2d:e9:5f:90:ba:b4:fd:43:76:f9:1b:56:59:a1:76:
+                    81:75:7f:d5:8c:35:bc:d5:9f:10:f8:cd:dc:3d:40:
+                    6b:3d:66:eb:e5:41:06:c3:85:e9:d9:64:ff:36:41:
+                    99:f1:8d:cc:a2:95:7a:86:ad:16:67:cf:40:c3:bc:
+                    1b:b0:90:1d:8d:a7:8e:7c:89:01:f2:11:2d:b6:53:
+                    13:20:bb:2a:ec:9a:ba:e6:b0:5a:ee:6a:b4:aa:82:
+                    47:eb:cd:32:b0:c7:4b:92:11:3a:58:3c:9e:bf:7f:
+                    df:ef:bc:fa:2c:d2:29:fb:95:76:4f:27:2d:14:a9:
+                    3e:34:39:29:18:84:01:c5:27:8f:d2:e4:85:72:6d:
+                    b1:43:d7:b8:56:a7:9d:0f:c3:45:b9:3e:27:c8:c1:
+                    05:a4:23:aa:4d:85:77:08:91:a3:fc:ca:5f:a7:bd:
+                    25:fb:57:a6:d3:29:e0:b0:39:87:6e:26:a7:f1:c0:
+                    65:ba:9d:80:e3:26:42:b9:d7:9a:e8:2f:c9:94:67:
+                    08:87:f8:2a:54:72:69:36:d9:87:e9:a5:e8:91:39:
+                    41:66:a4:7d:d7:ec:d4:7b:8e:b9:65:05:ad:90:0c:
+                    b3:a1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                1A:DF:4D:09:A0:4D:8D:18:9E:B2:43:6B:AF:D5:99:96:0D:C6:6E:0A
+            X509v3 Authority Key Identifier: 
+                keyid:8C:07:70:06:02:9A:7D:D2:99:47:6E:2F:63:D8:B8:67:2F:CE:E3:3B
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.11129.2.5.2
+
+    Signature Algorithm: sha256WithRSAEncryption
+         df:31:6f:7a:51:9b:68:73:12:e2:74:a7:c1:58:43:d1:fd:c4:
+         64:1a:0c:17:9d:5c:d0:9b:ab:f6:5b:de:f1:6a:08:7d:20:db:
+         c2:f6:4c:87:af:ad:c1:ba:52:15:04:2e:6d:5a:61:bd:e2:73:
+         15:c5:62:99:56:47:86:ce:c9:28:44:37:c7:0e:7e:af:5c:1d:
+         4a:4c:ac:74:e5:74:16:81:76:5c:ec:40:72:35:41:f0:9f:ec:
+         14:7f:ee:c2:35:ae:9f:57:e3:e9:68:48:c9:33:f8:ca:d5:9c:
+         0e:1a:ec:83:bf:fc:02:0c:3d:30:3b:f5:aa:a8:c0:8f:36:45:
+         f4:0c:48:bd:d9:11:c2:b5:b0:c0:78:6d:3c:c1:1f:96:ae:01:
+         31:e8:b9:9f:1f:65:41:bd:89:2b:ce:8f:cb:59:e3:8b:d1:97:
+         a8:83:f8:dd:63:13:e9:53:4f:0d:41:73:97:c5:06:4e:09:33:
+         e8:37:23:ad:5e:26:69:4c:70:7a:eb:cf:50:c0:b1:40:42:a3:
+         7c:37:ad:48:d4:a5:ee:44:b5:64:43:e6:52:ac:00:f3:fc:03:
+         9e:ab:fb:8d:03:4c:d3:2f:fc:b3:cb:31:9e:42:08:e1:c8:d1:
+         3d:d3:a7:ec:9b:f2:11:75:15:19:b3:30:25:c5:de:a5:06:b1:
+         44:17:bd:b9
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ee:16:50:2d:c1:27:44:01:0a:3f:67:6c:a5:e2:
+                    9c:5a:30:1a:81:73:ee:0c:07:51:44:01:0a:cc:cf:
+                    3a:a2:86:06:06:aa:54:46:d0:01:3e:3d:08:9d:74:
+                    6c:86:92:df:0c:bf:2c:ec:11:18:30:0c:a7:20:7b:
+                    9e:66:6b:a2:6b:fc:0d:53:5e:f1:49:69:56:ac:8d:
+                    b6:d2:18:79:59:8b:30:dc:1d:70:86:85:7f:2a:c2:
+                    33:df:a2:f2:35:6b:52:8e:14:41:a0:10:c9:aa:f9:
+                    94:2c:f3:09:ec:9f:c9:61:da:71:47:d2:b1:76:8a:
+                    c8:e2:2d:2b:48:b5:6d:f2:87:88:ce:97:b4:2d:53:
+                    99:35:7a:59:75:79:c7:e9:ed:d5:9a:03:81:f2:b5:
+                    bb:30:50:5a:8d:4b:c0:a5:55:0c:97:ff:f4:5a:ef:
+                    a1:4a:ae:ce:74:70:29:60:d7:84:a5:49:dd:c9:8c:
+                    d9:cd:e8:66:cd:59:af:b5:cf:8b:d5:3d:9b:80:2c:
+                    9c:eb:e4:04:11:3f:1a:a6:15:bf:96:66:bf:83:9b:
+                    4b:e4:49:4f:17:0d:df:42:5f:af:06:a1:50:5e:aa:
+                    c7:1f:a9:2e:7a:f0:49:6d:77:cd:e3:78:4c:3e:4b:
+                    f9:67:60:a3:f6:18:28:ba:7d:5a:df:9b:66:02:ca:
+                    38:1b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                8C:07:70:06:02:9A:7D:D2:99:47:6E:2F:63:D8:B8:67:2F:CE:E3:3B
+            X509v3 Authority Key Identifier: 
+                keyid:8C:07:70:06:02:9A:7D:D2:99:47:6E:2F:63:D8:B8:67:2F:CE:E3:3B
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         49:1d:f3:68:30:35:e7:2a:2d:8c:9c:fd:83:de:44:bd:1f:1e:
+         bf:f7:d6:ee:03:5f:e7:21:4f:f9:ca:08:ca:d4:99:ff:ab:8f:
+         42:3d:02:de:3f:7d:c1:4b:fc:aa:f3:b5:cc:b4:d9:04:b6:4e:
+         5a:bd:5a:65:de:2e:06:f4:90:a2:fb:18:e7:b3:54:b2:ff:37:
+         2b:15:de:26:2b:d7:11:1e:17:58:f3:b8:6d:10:ba:b7:8e:9a:
+         5d:8a:d7:5c:69:28:0c:0e:8b:ce:b4:e1:4a:a3:58:82:a6:f6:
+         21:39:fb:eb:5b:20:12:e2:7b:36:4e:be:cf:a6:dc:29:6c:ef:
+         01:44:07:e8:1f:a2:b4:7c:b1:84:c3:4b:ba:a8:bd:d8:e0:f9:
+         82:49:e9:f8:08:a5:c9:d6:3a:62:ce:ad:9e:57:ed:1a:92:e2:
+         d9:f1:7d:46:a4:6b:72:db:16:f8:61:75:50:5b:0a:30:62:13:
+         12:14:16:cc:6b:1c:f3:c4:df:a7:83:ad:c6:ee:d1:34:45:d7:
+         36:14:fc:5b:82:96:87:ad:45:bc:15:40:70:ea:e1:17:62:e7:
+         45:aa:a3:7f:33:f0:3f:32:8d:2a:98:64:62:17:f9:9a:8d:32:
+         e5:db:79:aa:50:8c:5d:91:40:76:b4:d6:92:5c:2f:81:86:92:
+         0e:8f:2b:12
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----