Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_none.pem

Index: components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_none.pem
diff --git a/components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_none.pem b/components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_none.pem
new file mode 100644
index 0000000000000000000000000000000000000000..0b79d970da08fb6ff170657ec5efc84d1f3a17c5
--- /dev/null
+++ b/components/test/data/cast_certificate/certificates/policies_ica_anypolicy_leaf_none.pem
@@ -0,0 +1,277 @@
+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={anyPolicy}
+  Leaf:           policies={}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 9 (0x9)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:92:c3:4f:27:2a:f3:65:b4:aa:df:99:ec:02:e1:
+                    4e:00:79:b1:96:25:09:94:ac:44:02:4b:99:d5:ed:
+                    0a:a9:7d:6e:7d:b7:71:b9:cb:c7:0d:54:5c:62:28:
+                    18:e3:81:27:65:b5:df:6c:1c:4b:ab:5a:e2:e1:0c:
+                    d1:2c:ef:cd:65:d3:74:4c:e0:23:64:94:6c:c1:eb:
+                    c7:5c:91:01:90:c3:0e:c7:da:a7:56:79:0c:1d:f7:
+                    ce:3d:02:fe:62:0c:c8:fd:fc:52:c8:f2:1a:23:54:
+                    a9:71:11:ef:52:4a:ba:89:2e:1c:82:c9:7b:aa:8d:
+                    07:4a:38:54:23:45:a2:08:4a:98:6f:37:4e:1d:f8:
+                    de:16:2a:88:d6:3a:37:bb:31:b0:6b:18:bd:0d:b5:
+                    8d:b9:7a:1b:be:2a:ce:95:f7:ff:2f:6d:28:fd:f8:
+                    bc:40:95:d7:c6:5c:0f:da:3e:b1:f2:2c:ad:c1:56:
+                    cd:69:9a:d3:79:d6:9a:46:68:f9:93:2e:e4:6f:87:
+                    a8:2c:91:d9:47:60:42:cd:d6:ab:2f:b1:6a:98:c1:
+                    2f:2e:14:ff:d5:c4:ec:64:78:fa:09:1d:2e:1e:40:
+                    8d:64:19:50:ec:f4:7f:bf:50:cb:1b:de:01:9f:8f:
+                    6f:d3:32:97:84:32:bd:6f:a4:3d:e1:0b:b8:ee:1d:
+                    3f:8f
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                6A:26:EF:38:8A:E3:00:ED:26:C5:C5:6B:3D:FD:98:60:10:2B:89:02
+            X509v3 Authority Key Identifier: 
+                keyid:79:CC:A4:3E:7B:31:9A:1B:9A:80:35:C3:8B:2A:C1:5A:8F:0A:BD:29
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         1c:7a:7e:77:39:3c:fc:94:ec:e5:5e:69:5d:70:ef:dc:85:3d:
+         a3:40:ea:8e:5d:86:c1:62:16:d3:55:03:b8:dd:c7:52:7f:c3:
+         43:85:05:4e:3a:4a:49:2a:49:01:35:a3:f2:60:46:d6:70:24:
+         37:b8:2b:e8:cf:39:18:a1:1e:cf:64:e1:ff:2b:ae:14:99:e4:
+         c4:58:e6:d1:fa:d6:fa:1d:b2:69:a0:9a:9f:ce:70:8d:e7:b5:
+         cb:a0:79:1e:12:33:e3:c5:84:37:80:da:3e:68:58:71:ce:1c:
+         d4:51:b9:b9:2a:5b:26:36:a7:ed:4d:3c:1b:95:17:5b:47:0b:
+         9e:a1:65:70:73:5a:4a:27:45:8f:b1:52:26:d9:74:7e:bd:e6:
+         49:a7:d7:d4:c8:03:6f:d3:87:49:5b:06:55:aa:a7:b4:a5:a5:
+         4b:6e:1d:00:ae:1a:e6:b5:0b:6d:04:8b:34:1b:a0:4c:fd:e3:
+         e0:ad:e7:f1:e4:c4:89:ae:22:e0:fd:04:cf:0a:2b:9e:b1:ed:
+         68:71:bb:4f:0e:67:55:ff:03:e1:1c:76:7c:c8:12:e1:62:c8:
+         df:c4:47:b8:2d:71:50:99:01:ca:4a:69:76:eb:2b:77:20:c0:
+         83:a9:e9:4c:2c:02:81:92:66:70:28:d5:4a:26:9a:b8:08:b3:
+         d0:d5:a6:9b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 18 (0x12)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:db:cc:7a:15:d2:86:e2:27:87:c8:bb:a5:50:65:
+                    03:38:43:3a:9d:aa:87:52:86:b5:45:04:1e:9f:81:
+                    22:f3:4e:62:e6:78:ff:e4:39:8a:3a:4a:55:3e:54:
+                    90:2a:e1:fe:62:ff:b7:d1:b1:06:37:eb:81:c7:4d:
+                    18:87:bb:24:6d:6c:26:63:15:7f:a1:d6:ab:3b:77:
+                    2b:7d:c8:74:9c:54:33:34:cd:cf:f6:7e:6d:1f:05:
+                    ea:ba:bf:ae:5e:ca:f5:a9:47:3b:27:61:24:3c:ba:
+                    74:58:70:27:68:b6:0b:fd:30:c6:f4:b6:56:4b:78:
+                    9e:ea:21:86:88:63:db:ae:b8:1d:ea:b0:f3:d8:bf:
+                    3f:9e:8c:69:cd:9e:40:41:10:41:48:01:cc:e4:3b:
+                    3c:9b:74:ea:e5:d9:37:bf:ce:2c:59:81:b3:f4:bb:
+                    b7:61:df:f9:ac:be:a3:63:22:bf:05:5a:46:d5:b8:
+                    68:fa:95:60:1e:25:b7:49:7b:4f:e0:d0:49:e9:f9:
+                    22:11:36:fe:4d:87:88:99:62:21:6e:ac:c7:d7:ee:
+                    64:07:bc:c9:87:78:67:8b:8a:40:3d:6a:c6:a7:e2:
+                    a2:e8:2b:f5:33:5d:0e:e6:8c:b7:85:63:11:d4:fa:
+                    fe:aa:5e:fc:a5:86:b4:b4:4d:dd:5f:f8:be:38:27:
+                    9f:75
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                79:CC:A4:3E:7B:31:9A:1B:9A:80:35:C3:8B:2A:C1:5A:8F:0A:BD:29
+            X509v3 Authority Key Identifier: 
+                keyid:4E:EC:98:88:CE:93:B8:9B:D0:A3:12:F9:03:90:96:AE:FF:AD:25:CE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         1e:2c:c2:5f:5e:25:2e:7a:aa:4e:2e:05:a1:7e:dc:59:b6:43:
+         a7:bb:91:91:ce:78:89:0c:76:82:b7:39:79:b1:3e:f2:a2:8b:
+         cd:63:aa:d5:dd:c2:20:64:db:a7:d0:21:64:e6:fe:4c:b3:5c:
+         70:7b:f8:31:1b:7c:c3:e6:c1:1e:42:d9:9c:a1:bb:24:e3:f8:
+         94:26:3b:e3:81:11:ca:0a:f7:a6:e5:94:ad:1b:c6:4d:f6:b0:
+         43:0f:13:1f:d6:c2:e3:bd:d8:aa:04:43:04:07:bf:b8:0d:86:
+         f7:d0:e5:1e:35:00:e6:94:e6:53:b5:4b:ee:10:dc:65:49:b3:
+         e9:1d:53:b6:9f:6a:83:39:9c:df:bd:40:f6:be:97:fa:81:82:
+         6a:81:44:ad:15:50:2e:bb:22:e1:b6:0d:e2:2c:6b:66:14:59:
+         bc:0d:8b:02:39:d0:d2:88:7c:ef:c6:2b:42:19:08:3e:52:70:
+         6a:68:7b:4e:66:18:66:3f:73:9a:5e:30:65:37:96:79:03:50:
+         a4:13:1a:2f:30:e1:37:b3:4d:14:9f:0f:a4:59:5c:f1:bb:eb:
+         8b:c2:77:82:fa:00:15:66:bb:12:4c:17:7b:65:c7:6e:45:30:
+         b4:99:a8:8a:bc:73:cd:92:56:78:3d:1d:79:93:e6:95:12:7a:
+         0f:c9:92:5d
+-----BEGIN CERTIFICATE-----
+MIIDgDCCAmigAwIBAgIBEjANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDARSb290
+MB4XDTE1MDEwMTEyMDAwMFoXDTE4MDEwMTEyMDAwMFowFzEVMBMGA1UEAwwMSW50
+ZXJtZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28x6FdKG
+4ieHyLulUGUDOEM6naqHUoa1RQQen4Ei805i5nj/5DmKOkpVPlSQKuH+Yv+30bEG
+N+uBx00Yh7skbWwmYxV/odarO3crfch0nFQzNM3P9n5tHwXqur+uXsr1qUc7J2Ek
+PLp0WHAnaLYL/TDG9LZWS3ie6iGGiGPbrrgd6rDz2L8/noxpzZ5AQRBBSAHM5Ds8
+m3Tq5dk3v84sWYGz9Lu3Yd/5rL6jYyK/BVpG1bho+pVgHiW3SXtP4NBJ6fkiETb+
+TYeImWIhbqzH1+5kB7zJh3hni4pAPWrGp+Ki6Cv1M10O5oy3hWMR1Pr+ql78pYa0
+tE3dX/i+OCefdQIDAQABo4HeMIHbMB0GA1UdDgQWBBR5zKQ+ezGaG5qANcOLKsFa
+jwq9KTAfBgNVHSMEGDAWgBRO7JiIzpO4m9CjEvkDkJau/60lzjA3BggrBgEFBQcB
+AQQrMCkwJwYIKwYBBQUHMAKGG2h0dHA6Ly91cmwtZm9yLWFpYS9Sb290LmNlcjAs
+BgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vdXJsLWZvci1jcmwvUm9vdC5jcmwwDgYD
+VR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQAeLMJfXiUueqpOLgWhftxZtkOnu5GRzniJDHaC
+tzl5sT7yoovNY6rV3cIgZNun0CFk5v5Ms1xwe/gxG3zD5sEeQtmcobsk4/iUJjvj
+gRHKCvem5ZStG8ZN9rBDDxMf1sLjvdiqBEMEB7+4DYb30OUeNQDmlOZTtUvuENxl
+SbPpHVO2n2qDOZzfvUD2vpf6gYJqgUStFVAuuyLhtg3iLGtmFFm8DYsCOdDSiHzv
+xitCGQg+UnBqaHtOZhhmP3OaXjBlN5Z5A1CkExovMOE3s00Unw+kWVzxu+uLwneC
++gAVZrsSTBd7ZcduRTC0maiKvHPNklZ4PR15k+aVEnoPyZJd
+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 17 (0x11)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bd:a8:ec:69:2b:0e:2d:98:61:a7:c3:3b:d2:a6:
+                    b5:d1:35:42:b6:f2:b1:3f:78:fa:3a:8a:8a:53:7f:
+                    f4:f5:4e:03:c0:fa:06:df:ef:7c:83:a1:4e:78:80:
+                    d0:22:53:20:7b:0c:ac:0e:00:67:52:a5:39:c9:6c:
+                    b6:91:64:d0:75:61:62:aa:cd:b4:14:b8:06:14:d6:
+                    62:b2:71:ac:bb:f5:44:53:0f:ef:f4:ee:ba:a1:1d:
+                    f9:40:97:50:ee:a3:a1:0e:a2:d2:45:85:66:26:55:
+                    70:f1:f5:9c:c2:1e:38:e6:80:3c:98:e2:be:4c:79:
+                    c9:42:5a:5a:28:ef:18:48:73:a7:2d:b7:b5:ab:c9:
+                    ea:7a:2a:ae:f8:34:f2:66:bf:67:82:49:b0:27:34:
+                    62:8b:73:49:c2:02:66:e5:a5:86:31:80:e9:ae:33:
+                    99:b2:9d:dc:37:aa:a0:02:35:80:de:ed:73:15:3f:
+                    c7:77:ba:49:d9:8c:1b:b4:6e:5d:a4:2f:89:bf:e4:
+                    c1:39:3b:bb:f6:54:59:b6:86:7e:78:da:02:5f:41:
+                    19:e9:ef:b3:28:9b:dc:b2:56:a1:8f:b4:be:d2:af:
+                    28:a9:dc:84:e8:e1:d9:86:b9:3c:87:38:3a:b2:68:
+                    36:29:1b:a2:57:f7:fe:2b:e5:7b:27:67:a7:bd:ed:
+                    88:81
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                4E:EC:98:88:CE:93:B8:9B:D0:A3:12:F9:03:90:96:AE:FF:AD:25:CE
+            X509v3 Authority Key Identifier: 
+                keyid:4E:EC:98:88:CE:93:B8:9B:D0:A3:12:F9:03:90:96:AE:FF:AD:25:CE
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         1e:96:67:78:64:ad:6c:ec:da:97:18:00:95:1d:b8:3d:cb:31:
+         69:5f:08:a0:f0:b6:13:13:ea:d0:1c:bb:17:74:ff:e4:0f:e9:
+         d8:d2:77:5c:31:c2:47:03:41:cd:8e:ed:83:ff:a9:03:b4:ff:
+         41:da:f3:d6:18:c7:15:82:a8:4e:e4:1c:e0:df:b2:c3:b5:fb:
+         61:e3:6c:98:f2:64:96:9d:11:c9:74:79:9b:a0:5b:7c:b9:fe:
+         04:d2:9b:fc:c2:1e:d8:71:c7:44:6f:19:45:84:40:4a:5a:d9:
+         61:bf:da:39:47:44:59:b1:df:b4:80:a9:7b:1c:32:98:ff:c0:
+         40:75:bd:a8:4c:c9:aa:92:f7:5a:1e:de:f0:92:26:3c:b3:08:
+         94:ba:d4:64:2b:32:1b:9a:6e:fb:8b:e6:8a:9b:5c:85:3f:88:
+         21:6d:85:ba:fd:1b:19:d7:48:63:4b:1f:83:33:9f:97:e7:b2:
+         2f:de:dd:e3:1d:19:d3:15:69:01:38:b3:ff:e5:35:d4:4e:16:
+         44:59:2a:3c:4e:18:c9:b0:d5:9f:b6:fa:4a:04:ab:bb:70:7d:
+         e6:4e:27:55:9d:4c:b9:a0:53:f0:b1:b8:4b:0e:d7:72:0f:b4:
+         64:53:24:76:c8:a7:58:c0:15:0e:7e:d7:20:6e:60:d5:01:6d:
+         47:b2:66:29
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----