Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_audioonly_leaf_none.pem

+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={audioOnly}
+  Leaf:           policies={}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:97:f2:23:a5:ed:d0:98:d4:07:da:46:ef:ae:58:
+                    2b:4b:fb:3c:2c:41:a6:20:45:19:c4:61:3f:47:a4:
+                    db:cf:16:73:25:56:fd:3d:db:02:60:3a:a6:7d:05:
+                    76:e9:4e:ca:51:64:78:58:82:55:42:43:92:e7:85:
+                    e7:4f:cc:5e:92:fd:7a:bd:ea:ef:5f:33:33:44:6f:
+                    29:a5:e4:51:b1:57:ba:51:cc:b4:da:d9:99:24:5d:
+                    82:c7:88:b0:7c:97:f6:0a:3c:d1:14:a9:91:cc:b7:
+                    1b:14:98:b6:cc:c8:c8:e7:39:c7:bd:05:31:23:d2:
+                    95:17:61:c8:b7:8e:2d:70:84:3d:63:11:bb:d4:d5:
+                    92:e0:49:70:f1:2b:75:d6:a5:29:20:0f:02:ba:8f:
+                    d3:cc:61:0b:7a:fa:bc:6c:be:4e:a0:39:ee:b4:e5:
+                    07:90:b7:77:98:96:95:45:38:b3:a5:c4:c3:97:ee:
+                    ee:70:c7:78:be:b7:50:ba:62:00:2f:a6:9e:1a:9b:
+                    50:d6:08:fd:fe:b9:e0:85:ac:e7:91:ef:a9:41:a0:
+                    62:35:c4:8b:c0:78:59:6e:a8:a7:54:10:88:ed:28:
+                    c9:19:9b:b0:4b:67:c1:42:ec:a3:5d:8b:bd:47:fd:
+                    9d:2c:ad:81:5c:2f:82:13:c4:cf:84:b4:64:ef:e9:
+                    ef:7d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                86:39:F7:45:1C:19:7F:C1:8D:93:B7:C6:18:53:8E:CD:82:EA:78:8A
+            X509v3 Authority Key Identifier: 
+                keyid:05:83:C2:37:26:DF:09:D8:02:81:82:DF:E5:5C:1C:FC:EB:A2:36:22
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         47:fd:b0:3b:f6:57:43:83:51:b5:c1:d2:fe:fa:b3:ee:54:6e:
+         32:10:ce:da:18:be:2f:57:11:44:7e:5d:e8:09:54:dc:44:5b:
+         fd:17:ce:7f:97:64:1d:f8:32:61:33:55:2f:05:37:b8:35:49:
+         bf:41:9e:5a:0f:29:76:e2:f2:c6:f2:5a:9e:87:b9:2e:cd:ad:
+         84:6b:8d:b9:71:df:a6:dc:32:36:69:25:29:8e:11:77:83:a8:
+         d6:aa:e5:18:89:ab:15:eb:0c:cd:24:56:6d:81:ed:08:ee:f3:
+         57:59:97:41:74:3e:31:7d:ab:b1:32:bb:95:ae:1f:8a:83:60:
+         a4:3d:72:0e:c1:28:05:7e:4b:2e:37:64:36:f5:00:b8:50:6b:
+         66:3f:23:b5:c6:1a:07:b6:c6:fa:44:69:f5:36:0a:3c:d0:16:
+         00:db:4d:92:da:a6:27:89:25:df:9e:c9:48:9d:dd:10:d9:4e:
+         2b:7a:cb:61:5d:32:3a:64:a8:8f:29:eb:19:68:0b:de:b5:3b:
+         e9:76:49:7d:93:c3:6e:75:b8:cf:ca:af:6e:37:1b:38:e4:c3:
+         e8:41:4f:99:dd:af:c0:4e:96:aa:50:70:95:a9:1a:cc:ef:43:
+         b7:08:f0:e9:0b:a7:d8:21:36:ba:98:ea:4f:db:3e:aa:4c:92:
+         84:36:cd:1e
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 2 (0x2)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c5:f5:38:66:89:22:6a:2f:55:0b:c5:a1:bc:72:
+                    98:d9:66:94:3f:12:5c:a2:ec:6f:d1:5f:79:68:a2:
+                    3e:14:fd:b6:75:20:c6:ba:15:69:e4:10:8c:9e:fa:
+                    bf:56:02:1b:c9:6b:f1:a2:d6:f1:cf:32:1e:37:db:
+                    ae:a1:bd:af:57:b3:7a:de:52:44:46:d8:e5:34:41:
+                    51:55:87:4a:15:b1:a8:4e:ba:48:38:4f:41:b0:ae:
+                    ef:c8:35:a1:ce:9f:2b:a0:84:89:a7:32:62:2e:85:
+                    66:90:a5:ba:e3:4f:4a:87:1c:4e:b1:59:1c:82:ce:
+                    cd:32:f8:9c:3a:9e:79:32:88:f7:18:ea:7e:d0:f9:
+                    75:d1:b2:6c:bf:0c:7b:eb:52:80:2c:c0:0d:93:2d:
+                    a5:45:5f:3d:3c:f2:9b:8a:a5:67:b0:bb:af:8d:1b:
+                    f9:a3:57:55:f9:de:02:a9:4d:27:6d:ae:ff:65:04:
+                    ce:22:2e:44:8f:3a:dd:e6:ee:07:a4:78:6f:a0:1e:
+                    a8:f0:c1:35:bb:eb:6c:33:65:32:a8:e6:c9:38:8a:
+                    cb:63:03:35:00:93:68:3f:2f:fc:f7:3e:2c:9d:4c:
+                    42:53:c4:49:8f:fe:2a:48:94:09:f5:dd:cd:bd:0e:
+                    44:21:6d:52:81:20:f4:f6:92:78:98:fd:4b:50:79:
+                    5e:7d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                05:83:C2:37:26:DF:09:D8:02:81:82:DF:E5:5C:1C:FC:EB:A2:36:22
+            X509v3 Authority Key Identifier: 
+                keyid:3E:D6:2F:0D:F6:31:B3:AD:E0:AA:1D:00:88:8E:39:FB:C3:E4:BC:BA
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.11129.2.5.2
+
+    Signature Algorithm: sha256WithRSAEncryption
+         92:2c:74:a2:94:0e:a8:cc:ca:17:ab:1f:c1:35:97:45:2f:63:
+         6c:a7:d7:6a:a6:5a:8d:d0:1d:d5:9f:35:9d:bb:10:ba:b2:2f:
+         c7:41:95:7c:ac:f7:12:3d:8e:6e:af:c5:f6:ff:c0:34:7b:b3:
+         d0:c8:f4:ba:3d:c1:72:9c:90:10:73:de:bf:9c:50:fe:a3:a5:
+         1f:93:15:4b:30:a4:ae:6c:76:ac:7c:d2:94:45:0b:05:8a:ef:
+         f8:b3:a1:1e:e0:ca:ca:b6:3b:1f:11:a5:64:b7:d4:bd:67:7e:
+         da:2d:84:f5:ba:e9:42:da:49:cb:1e:b7:51:e6:12:1b:f2:1c:
+         8e:79:10:f4:00:fd:8d:e4:26:75:0b:85:6a:48:74:f1:e6:cf:
+         b2:92:f2:ad:df:da:b9:3c:32:70:e6:b0:16:12:bd:bf:64:45:
+         a7:43:8d:47:1c:f9:13:04:6f:57:f8:72:d2:68:e9:f0:c7:1e:
+         c8:d9:b2:05:fd:aa:36:85:f9:2c:09:43:b4:8a:14:ee:7f:82:
+         f3:47:67:0a:bb:7e:a1:13:6f:38:54:88:5e:87:e3:79:ee:f0:
+         c4:3f:76:96:5e:1d:d0:c7:4a:23:3d:d2:d6:bd:b9:ce:fb:5f:
+         69:92:e3:c9:b8:4a:be:75:32:e4:f6:61:0a:38:65:16:28:59:
+         48:94:5d:58
+-----BEGIN CERTIFICATE-----
+MIIDhjCCAm6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfU4Zoki
+ai9VC8WhvHKY2WaUPxJcouxv0V95aKI+FP22dSDGuhVp5BCMnvq/VgIbyWvxotbx
+zzIeN9uuob2vV7N63lJERtjlNEFRVYdKFbGoTrpIOE9BsK7vyDWhzp8roISJpzJi
+LoVmkKW6409KhxxOsVkcgs7NMvicOp55Moj3GOp+0Pl10bJsvwx761KALMANky2l
+RV89PPKbiqVnsLuvjRv5o1dV+d4CqU0nba7/ZQTOIi5Ejzrd5u4HpHhvoB6o8ME1
+u+tsM2UyqObJOIrLYwM1AJNoPy/89z4snUxCU8RJj/4qSJQJ9d3NvQ5EIW1SgSD0
+9pJ4mP1LUHlefQIDAQABo4HkMIHhMB0GA1UdDgQWBBQFg8I3Jt8J2AKBgt/lXBz8
+66I2IjAfBgNVHSMEGDAWgBQ+1i8N9jGzreCqHQCIjjn7w+S8ujA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wFwYDVR0gBBAwDjAMBgorBgEE
+AdZ5AgUCMA0GCSqGSIb3DQEBCwUAA4IBAQCSLHSilA6ozMoXqx/BNZdFL2Nsp9dq
+plqN0B3VnzWduxC6si/HQZV8rPcSPY5ur8X2/8A0e7PQyPS6PcFynJAQc96/nFD+
+o6UfkxVLMKSubHasfNKURQsFiu/4s6Ee4MrKtjsfEaVkt9S9Z37aLYT1uulC2knL
+HrdR5hIb8hyOeRD0AP2N5CZ1C4VqSHTx5s+ykvKt39q5PDJw5rAWEr2/ZEWnQ41H
+HPkTBG9X+HLSaOnwxx7I2bIF/ao2hfksCUO0ihTuf4LzR2cKu36hE284VIheh+N5
+7vDEP3aWXh3Qx0ojPdLWvbnO+19pkuPJuEq+dTLk9mEKOGUWKFlIlF1Y
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 1 (0x1)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:de:b7:b7:b9:aa:ed:10:09:6d:50:62:43:51:cf:
+                    e6:d8:4f:84:6c:98:1b:4d:a8:85:f0:d9:ae:db:4e:
+                    7d:c8:8d:1c:48:eb:24:7e:66:0d:9b:54:15:12:5c:
+                    07:e3:7a:db:4a:4a:8a:62:6b:71:8e:bc:55:0b:3f:
+                    9b:60:a3:15:6a:1f:2f:49:cc:2b:09:a3:1a:1f:4b:
+                    86:e1:82:5f:78:3e:e7:1e:84:42:1b:e1:fc:0c:f6:
+                    47:92:29:74:e8:49:c8:33:ee:25:ba:36:5a:8c:34:
+                    ba:e4:07:a0:a4:eb:fb:cd:ab:ae:d4:d6:51:a1:63:
+                    fb:e7:f3:03:c0:1b:8b:9b:a0:2a:9f:f6:ac:58:ef:
+                    3c:9d:58:42:b9:53:66:06:90:1d:0c:30:5d:db:f5:
+                    2d:13:da:ce:09:05:2d:d4:65:9b:c0:f8:37:07:95:
+                    d4:fc:fc:a6:a0:cf:8f:77:b8:06:0f:22:5e:12:10:
+                    96:58:64:f1:d9:1a:9d:9e:16:47:3b:ce:dd:8f:8f:
+                    6e:06:23:1c:52:10:f1:3e:e6:4d:a8:40:fc:17:5f:
+                    fa:9f:d9:1f:81:40:39:4f:8b:f3:74:ba:b5:07:b0:
+                    fc:2d:ef:58:d2:db:3f:1f:04:b7:7c:d6:80:5c:59:
+                    4b:29:74:d8:5f:99:8e:f0:bc:c1:20:2c:34:24:eb:
+                    be:e9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                3E:D6:2F:0D:F6:31:B3:AD:E0:AA:1D:00:88:8E:39:FB:C3:E4:BC:BA
+            X509v3 Authority Key Identifier: 
+                keyid:3E:D6:2F:0D:F6:31:B3:AD:E0:AA:1D:00:88:8E:39:FB:C3:E4:BC:BA
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         51:75:c8:11:3e:1f:f6:8f:29:97:5a:ef:41:d3:60:7c:61:41:
+         4f:03:1a:17:db:92:a3:fd:72:11:05:c7:6a:5f:a7:30:76:41:
+         dd:b4:f0:f9:30:ab:d9:3f:6c:3e:2a:63:45:a9:7f:32:aa:05:
+         0b:0f:c1:84:57:c9:0b:4e:f8:86:7e:c9:cc:e9:52:83:a2:c0:
+         73:c1:06:f8:eb:af:0a:a9:8e:6a:12:77:f9:e3:77:f0:a8:fa:
+         fb:af:76:4e:c4:5a:e6:60:c6:8b:24:10:4f:5e:07:d4:4e:4d:
+         78:c6:9b:5d:40:ef:a5:c3:2e:3b:1d:f6:1b:98:3c:d2:ed:ba:
+         47:d6:11:af:f0:21:65:a3:72:f8:ce:29:5f:f4:e7:bc:2b:0a:
+         fe:d8:c3:76:28:73:67:5d:dd:9c:2c:7a:d7:f6:1b:c6:c3:10:
+         10:9d:34:8e:bd:00:46:9e:9d:41:64:23:36:ed:b6:d0:29:2b:
+         88:cc:9d:66:20:9f:14:d1:13:6c:9b:9f:84:04:c5:8c:e3:50:
+         0c:2c:f5:2e:5c:e7:a2:74:b2:8a:ee:ae:2f:d0:c8:18:43:2d:
+         ad:3e:cb:f6:ad:9c:ab:27:ba:b3:15:82:03:e6:ee:69:0a:cb:
+         01:4f:fb:54:b3:e0:75:d5:10:ad:7d:c5:f8:84:4a:d8:88:85:
+         7a:20:0d:a6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----