Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_none_leaf_anypolicy.pem

Index: components/test/data/cast_certificate/certificates/policies_ica_none_leaf_anypolicy.pem
diff --git a/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_anypolicy.pem b/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_anypolicy.pem
new file mode 100644
index 0000000000000000000000000000000000000000..6d5208dace4cc418d954592f4b7a3f754d8f8641
--- /dev/null
+++ b/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_anypolicy.pem
@@ -0,0 +1,278 @@
+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={}
+  Leaf:           policies={anyPolicy}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7 (0x7)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cf:15:82:72:db:54:3a:13:1f:6a:ec:55:74:fd:
+                    c5:29:b8:33:8b:0e:f9:ab:33:6a:e7:46:e2:5c:96:
+                    2f:4d:50:42:a6:dc:2e:55:d3:61:01:6b:c4:a8:8d:
+                    ab:05:79:e9:42:28:8a:5a:c2:47:29:9b:99:9a:ab:
+                    f8:64:35:75:9b:a0:8e:ce:1e:f5:b2:47:ee:90:23:
+                    12:29:e9:4b:1b:1a:59:34:e3:ba:38:7a:83:d5:ce:
+                    ce:39:39:78:8d:d1:93:20:4c:0f:60:b5:ac:9a:80:
+                    a5:4c:d8:4e:f0:88:89:1b:d9:7a:63:8f:9b:19:75:
+                    c5:d2:ef:48:6b:79:eb:cf:61:6d:22:a1:b7:3b:40:
+                    20:d2:ae:f6:48:b2:88:90:40:3f:f2:75:a9:ad:2c:
+                    76:ab:ca:d8:61:06:93:1c:d4:f5:a4:d8:d9:09:c9:
+                    1f:0d:ef:26:37:50:ad:cf:a1:a1:89:00:56:7f:92:
+                    cf:6b:ec:0f:76:55:ab:81:55:a7:2e:8f:5e:69:c9:
+                    23:38:a2:18:61:20:bf:e5:c7:82:4a:d9:d0:77:03:
+                    35:8a:4d:43:c1:30:f8:67:b5:83:29:8c:df:a8:9d:
+                    0e:d6:98:64:8f:77:36:13:fc:1d:40:de:3b:3d:4c:
+                    19:24:cc:07:68:93:36:b5:1a:0c:fc:4e:17:95:6d:
+                    3a:55
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                69:F1:3A:B2:9E:B9:B5:10:AF:79:90:80:34:9D:B9:BD:1C:B0:90:A6
+            X509v3 Authority Key Identifier: 
+                keyid:2F:57:CF:1E:AE:33:BF:E2:E3:98:F4:28:80:63:6B:FF:29:21:8F:76
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Certificate Policies: 
+                Policy: X509v3 Any Policy
+
+    Signature Algorithm: sha256WithRSAEncryption
+         22:71:c6:67:ab:c1:d7:29:f4:41:6a:da:54:06:9d:26:f2:10:
+         cd:04:0d:f5:99:34:3e:08:6a:be:ff:d0:18:10:63:4d:79:46:
+         b5:28:b4:db:d1:27:4f:79:55:dc:45:30:d9:ba:99:7a:d7:bc:
+         de:14:1e:73:f2:82:2e:ca:6d:45:e4:98:28:cd:a0:28:e9:86:
+         33:93:c6:c4:f0:7a:b9:bf:1d:69:6d:b8:1e:eb:81:85:a6:ad:
+         d0:c9:af:e2:20:5f:e5:8b:40:7b:61:0c:b8:8c:9e:cc:14:9d:
+         0e:c5:e9:13:e3:30:ed:83:d3:ac:ba:cf:3e:04:20:1c:ba:07:
+         2d:e7:81:0b:b0:1b:d4:7c:d9:3a:92:5d:54:44:c0:79:b9:d8:
+         4f:0f:79:b2:63:ee:2f:ae:2f:00:97:7b:47:92:97:19:dd:25:
+         10:a7:5a:40:ec:eb:dc:b5:c8:05:ab:2e:dc:1a:c2:06:fb:90:
+         b1:88:af:27:56:b5:a1:c0:a8:f5:65:3f:98:bf:0f:16:70:41:
+         c3:cd:fa:c5:f2:fc:21:2a:25:db:98:1e:1f:ab:a7:b0:a2:7f:
+         1a:72:9f:6f:9a:84:81:7d:99:4a:09:13:2f:30:50:fc:98:da:
+         0c:c0:fd:bc:7c:84:66:dc:d3:8d:52:73:28:cd:ee:1e:c7:8f:
+         e5:5d:1c:f7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 14 (0xe)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:dc:65:d8:cd:cf:c3:59:0c:3f:6e:3a:3e:47:36:
+                    78:2b:84:8d:79:6d:e0:ca:4b:87:6c:48:6c:48:e4:
+                    55:83:5f:c9:32:65:56:6c:fa:13:67:1d:2b:da:8f:
+                    01:7e:ea:bd:fa:69:ed:29:9f:28:6a:b4:07:a2:10:
+                    15:28:46:01:b7:27:5b:3a:61:03:47:6a:fe:d2:71:
+                    e7:aa:b7:f4:a8:29:74:cc:7e:a0:52:c1:f6:fb:81:
+                    90:77:55:e6:03:8a:d9:d0:e5:5e:31:1b:0d:52:7f:
+                    2c:4d:2d:37:7c:e9:66:1f:a9:eb:45:9a:e8:bd:a7:
+                    4d:5d:4a:fe:21:4b:2c:a2:3a:b5:e6:81:fd:fc:d0:
+                    af:96:02:53:1e:b3:07:1c:9b:25:d5:a7:d9:22:6a:
+                    e4:50:4a:86:bf:9b:54:02:04:28:6f:e2:47:c3:f8:
+                    02:af:ed:10:f3:f5:68:f3:ca:8b:41:85:b3:63:61:
+                    23:22:79:fa:0a:0f:5e:a0:5c:67:61:9b:12:e7:02:
+                    2f:63:da:a2:79:e3:94:10:44:2f:bd:78:62:c0:73:
+                    f0:d0:76:ff:a1:8b:2f:be:f3:87:fa:5e:8b:63:5d:
+                    cd:73:42:e3:a1:84:c5:a4:62:37:6f:8a:2c:2a:3d:
+                    97:5c:0c:00:52:e7:85:b5:a1:f9:39:b0:13:ca:a5:
+                    12:f3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                2F:57:CF:1E:AE:33:BF:E2:E3:98:F4:28:80:63:6B:FF:29:21:8F:76
+            X509v3 Authority Key Identifier: 
+                keyid:E4:A1:AC:CB:CC:C3:AD:20:0C:B2:59:77:33:E0:71:96:CC:C3:13:75
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         9b:ee:65:41:e3:21:87:17:8e:50:68:34:5e:07:9e:bf:34:eb:
+         73:db:d6:f9:a0:86:68:bc:e1:49:3a:81:fd:6b:16:ac:a9:fa:
+         c5:c9:04:78:3e:4a:00:1d:a9:67:a3:54:2a:40:44:bb:9a:6d:
+         0f:e7:2d:97:0e:c3:0a:e9:78:87:90:e3:73:63:53:4e:96:e7:
+         07:f0:04:9f:57:c4:7a:54:06:10:db:a9:b6:5e:c6:2e:64:62:
+         5d:da:c9:ea:91:56:aa:b2:43:c9:00:6b:60:f8:ab:28:41:59:
+         27:24:de:e7:bb:fd:54:49:d5:df:df:c2:b1:1b:ca:a7:37:83:
+         f6:bc:0e:d6:87:cb:f7:f1:8a:5f:31:a9:32:c8:ca:1c:bd:ab:
+         b8:0b:13:17:5a:ec:6a:57:7f:db:a6:9d:d8:e1:d5:50:f6:15:
+         08:a2:95:6a:1e:c2:ae:8d:b0:72:bb:12:84:2d:ab:10:e0:2f:
+         af:28:33:64:1f:3d:9b:f3:03:60:8d:58:81:6e:9b:ac:89:c9:
+         06:33:06:d5:4a:e6:c3:81:34:47:6d:9b:2d:a0:30:df:f3:a7:
+         17:1d:07:29:55:20:97:20:69:5b:25:fe:c4:ff:ff:32:df:41:
+         a2:bc:6b:85:6d:f3:3a:d4:13:42:81:6c:5e:6b:5f:7f:fc:30:
+         d1:3a:13:b6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 13 (0xd)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:df:14:ae:c9:18:37:0f:37:56:f3:f0:a6:cf:84:
+                    38:c2:48:88:e4:49:a5:db:0d:29:1c:71:e4:9b:2b:
+                    1b:23:c4:2f:2e:4a:02:c7:f7:d7:84:e5:67:f5:ab:
+                    b2:99:49:65:82:96:70:3d:35:33:9b:da:77:4f:e0:
+                    02:01:dd:cb:a3:0f:1b:e4:48:6b:f1:d9:14:97:3d:
+                    b5:b7:a7:29:6f:ce:74:47:73:df:23:3e:40:6f:01:
+                    4f:6e:d3:bd:0d:23:be:94:bd:e3:a0:34:1f:8c:3a:
+                    80:eb:98:4a:fa:2a:00:ee:0d:da:fb:f6:69:c1:73:
+                    cc:0f:c0:23:c6:6f:1e:af:4c:d5:42:79:00:66:19:
+                    ae:4b:c0:ed:52:a3:bf:40:4c:98:ec:92:97:d8:af:
+                    d9:e7:47:8a:23:f7:76:b6:43:a7:bd:ee:4d:3a:4c:
+                    6f:1d:1b:2a:aa:c0:39:3a:e2:b5:27:dc:58:d9:b6:
+                    60:c5:84:77:9d:66:da:76:d3:12:de:93:37:c5:b8:
+                    aa:dc:39:3a:2d:be:65:45:de:d9:eb:e0:0c:53:51:
+                    ee:0b:96:9b:72:21:eb:53:5c:3b:3b:82:d8:2f:10:
+                    56:04:c3:12:73:f7:72:d3:30:50:ee:1d:99:6b:02:
+                    39:40:a1:36:fd:27:5d:f4:82:19:21:3c:68:54:e7:
+                    d1:19
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                E4:A1:AC:CB:CC:C3:AD:20:0C:B2:59:77:33:E0:71:96:CC:C3:13:75
+            X509v3 Authority Key Identifier: 
+                keyid:E4:A1:AC:CB:CC:C3:AD:20:0C:B2:59:77:33:E0:71:96:CC:C3:13:75
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         7e:6f:b9:38:cc:e4:f7:f5:2b:de:1e:b4:1c:46:71:0e:f0:e0:
+         2b:88:cd:e2:fe:d5:de:ec:87:c4:f2:fc:32:71:6d:f5:eb:f3:
+         26:70:ae:48:45:6e:a6:8b:30:38:d1:30:8a:36:d8:27:6e:83:
+         f4:f2:96:68:db:d6:36:c7:ed:d7:d1:13:04:bf:5a:1c:8b:70:
+         3e:fd:ca:50:ac:a6:21:0f:22:61:78:d8:5d:46:7e:48:ca:23:
+         24:06:5e:91:09:cf:ef:0e:15:4c:c9:4a:83:b4:a7:c0:1b:93:
+         9b:2a:a9:4d:3c:ad:49:b2:7c:6b:f3:b1:be:63:d2:80:c8:86:
+         28:6f:87:f3:84:d2:c7:37:26:8b:f5:8c:93:89:8b:9a:32:bb:
+         e9:b6:50:b8:f2:8c:b8:06:f6:32:ee:2d:d4:d2:c8:bc:6d:8e:
+         ba:02:94:f7:68:c1:c5:6f:01:68:e3:14:31:2e:f8:90:6f:91:
+         36:2e:ce:3d:3b:e3:f4:90:f8:7d:ac:b6:a2:ab:d2:ea:e1:24:
+         67:25:4e:c0:65:d0:13:df:97:a6:02:b9:67:80:2d:4e:3d:da:
+         bc:d4:e5:53:9a:d2:91:48:33:47:d8:c4:e9:d0:8f:18:85:76:
+         df:d6:c0:92:90:8c:de:9e:7b:cc:1d:1c:3e:d3:c3:4b:be:e8:
+         e0:2c:3d:2b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----