Add tests for Cast certificate interpretation of policies.

components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem

Index: components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem
diff --git a/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem b/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem
new file mode 100644
index 0000000000000000000000000000000000000000..460c625fe867825c8f49d1344564362deb0e24a3
--- /dev/null
+++ b/components/test/data/cast_certificate/certificates/policies_ica_none_leaf_none.pem
@@ -0,0 +1,274 @@
+[Created by: generate_policies_tests.py]
+
+Cast certificate chain with the following policies:
+
+  Root:           policies={}
+  Intermediate:   policies={}
+  Leaf:           policies={}
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 5 (0x5)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Intermediate
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Leaf
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c4:9e:5a:c3:98:a5:13:8c:c7:94:55:72:71:10:
+                    c2:f3:eb:d9:7b:ce:34:57:74:d7:c1:53:2e:75:f0:
+                    f4:15:04:80:f9:d9:60:ef:6e:be:89:9a:8f:7c:3b:
+                    ee:a6:4c:b9:ff:87:8f:af:9b:61:ad:02:5e:f9:f7:
+                    ad:fd:65:96:79:01:64:ff:c8:88:bd:c8:96:8a:46:
+                    e0:62:bd:1a:20:1d:83:74:61:51:96:b0:29:f0:26:
+                    b7:86:31:08:de:4e:16:9a:fd:f6:f3:08:10:c9:93:
+                    bc:7d:4a:3f:76:9a:b1:5b:0f:8c:66:35:e2:5e:e0:
+                    b9:51:ff:46:65:d2:bf:b3:45:97:eb:07:2f:74:de:
+                    b8:f0:20:7e:2c:6e:ab:ea:09:92:28:11:70:4c:09:
+                    02:f4:c7:8b:fe:17:d5:b1:d6:3c:04:0e:85:8a:dc:
+                    3a:2a:4d:0d:62:8f:d4:d4:0c:96:e7:18:48:8c:46:
+                    b0:a4:bb:8d:d7:7f:5b:45:d0:2a:c7:a9:83:c1:86:
+                    12:9b:97:75:65:91:04:bb:52:4e:56:7a:3c:2e:9c:
+                    72:ac:c4:eb:8a:c2:eb:28:58:94:da:df:45:bc:f6:
+                    e1:91:ba:db:d9:3e:76:e8:87:84:eb:8c:c4:16:dd:
+                    b7:e8:c3:b2:24:fa:e1:b1:8f:ec:74:20:70:e5:13:
+                    e2:1d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                28:F3:70:47:2A:49:D0:97:E3:41:14:C7:6F:42:98:8B:E3:7C:7C:0B
+            X509v3 Authority Key Identifier: 
+                keyid:61:89:8E:9B:4C:E5:ED:3A:40:96:77:89:D3:BD:C0:66:CC:A5:39:9D
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Intermediate.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Intermediate.crl
+
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+    Signature Algorithm: sha256WithRSAEncryption
+         af:9a:86:7d:cd:27:1e:e2:31:c5:8a:3b:3a:d5:80:e0:8a:86:
+         e6:1b:3c:28:75:f0:8a:a9:ac:99:eb:3e:78:bb:00:d0:2f:e6:
+         8f:ce:11:dc:c9:0e:f5:87:b4:2f:6e:fd:26:cd:45:30:3a:4d:
+         8d:b9:88:28:ab:c8:a2:9e:c4:30:60:05:e4:b8:73:62:a2:2c:
+         b5:9f:35:c5:f4:20:ab:83:29:b5:a0:e5:75:8b:fb:b5:0e:83:
+         5f:81:84:79:a6:32:b0:4d:9d:91:47:19:11:e3:ac:f7:95:3a:
+         81:cf:27:f2:88:5c:28:92:ce:1c:64:34:f4:0d:44:db:c4:40:
+         dd:4b:e7:b5:f8:7e:01:ac:1e:69:60:7b:a8:d5:e6:8b:c1:7a:
+         1d:6e:e5:ce:bf:9b:c7:64:68:97:df:09:5a:c4:e0:d4:60:01:
+         76:ab:31:4f:f5:2d:b0:dd:c6:a2:44:75:d2:4d:22:4d:ae:bb:
+         5e:a3:61:e3:10:6d:0f:be:74:60:90:07:21:a7:d6:24:f1:a5:
+         77:35:6c:33:fb:b2:3d:ea:40:b3:9b:cd:82:a0:d8:89:bd:7d:
+         58:30:04:50:de:03:08:b1:02:24:91:35:77:34:b7:18:03:91:
+         d4:e7:74:1b:fb:a1:77:4c:8f:56:78:fe:77:18:39:57:c2:45:
+         25:a6:e3:76
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 10 (0xa)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Intermediate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c4:2d:30:96:25:ad:86:fe:6f:7c:ed:b1:d8:67:
+                    c1:3e:58:5d:95:22:9f:2f:a1:88:f4:e1:f1:63:7f:
+                    77:b4:60:95:23:57:33:ad:c4:8e:85:71:71:36:1b:
+                    02:78:bb:69:7a:5e:ae:af:e4:97:97:66:2d:3a:f7:
+                    df:b9:d8:5a:34:a5:68:35:e3:5d:e4:e9:18:77:93:
+                    c6:54:e8:6c:a0:34:20:a5:99:d0:4f:fb:44:b9:29:
+                    52:00:34:38:9b:17:e1:88:5c:41:d0:19:8b:4b:77:
+                    4a:cc:ab:a7:32:79:b4:77:25:6b:38:05:05:70:0e:
+                    9e:fd:94:17:de:d7:02:09:82:00:65:8f:b6:f9:d7:
+                    a0:57:ac:e6:4c:a7:2e:f3:b8:c9:b4:d1:6d:d1:9f:
+                    81:d4:99:93:01:63:52:72:5d:30:75:3c:8c:1d:73:
+                    1c:75:7d:18:1b:a8:b3:f0:83:a4:0e:b9:15:39:03:
+                    81:18:b0:4e:bf:c2:fe:1d:17:f2:1c:4a:de:a5:87:
+                    63:30:f8:5b:93:ed:83:1b:3f:f7:72:54:49:33:31:
+                    33:66:2f:0e:3f:b7:e4:97:ae:63:69:9c:a0:1c:e5:
+                    90:42:5e:07:62:4b:a5:c4:12:fb:97:b4:a7:da:01:
+                    90:1e:8b:78:ee:66:40:af:dc:23:d4:7f:f5:99:f2:
+                    47:41
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                61:89:8E:9B:4C:E5:ED:3A:40:96:77:89:D3:BD:C0:66:CC:A5:39:9D
+            X509v3 Authority Key Identifier: 
+                keyid:27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         ce:dd:90:3d:0a:fe:c3:42:e6:3d:32:57:e5:84:04:6d:80:72:
+         6c:92:75:cb:ae:2a:0d:a4:c8:41:2f:c7:c6:bc:02:8f:33:3d:
+         c5:e2:97:51:ef:8d:e5:84:aa:8a:97:fb:c3:10:a1:73:ae:68:
+         76:a5:80:42:ab:df:4c:8a:8a:15:5b:bf:b9:ca:6b:3a:66:ec:
+         22:9e:c8:0a:27:9d:c8:5b:07:71:ba:06:74:47:63:dc:08:06:
+         9b:d6:eb:6a:11:a2:12:48:68:33:a4:0f:35:aa:a3:78:44:0e:
+         d6:af:96:5d:e6:26:66:df:09:be:ce:ee:38:2a:4d:b7:36:32:
+         d2:1c:73:b3:54:6a:a6:dd:0d:76:16:08:eb:a0:8d:30:ce:8d:
+         bc:b7:8b:be:c7:27:79:95:0b:80:88:57:97:b2:e8:53:46:86:
+         ad:62:bc:2c:04:59:e9:6b:3b:31:f8:78:93:3d:55:10:3f:da:
+         47:bd:a3:89:58:f7:62:ad:8f:00:29:6c:03:ab:7b:c0:6f:bd:
+         11:25:2c:35:b7:51:c4:13:ee:be:76:ae:e3:50:d6:1e:e5:a3:
+         85:88:ea:fa:4f:49:68:61:c4:27:28:d0:f0:92:eb:ce:bd:59:
+         af:d5:a4:c8:06:4f:2c:16:8f:eb:cc:a2:91:26:72:f1:81:1f:
+         82:92:0b:4c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 9 (0x9)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Root
+        Validity
+            Not Before: Jan  1 12:00:00 2015 GMT
+            Not After : Jan  1 12:00:00 2018 GMT
+        Subject: CN=Root
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:f4:50:3d:b5:7c:ca:fd:0b:8f:4c:94:7e:6a:6e:
+                    d7:fc:6e:b0:40:8b:e2:48:78:b6:99:7e:b6:ab:fd:
+                    2a:0f:c8:64:6d:2a:70:79:d8:b9:0e:33:61:21:c4:
+                    89:3f:79:28:db:7c:d7:8a:13:f3:2e:f1:85:be:ab:
+                    21:31:d2:c3:7e:0a:d6:bd:56:e2:2a:b2:29:6c:52:
+                    00:17:45:c8:47:15:1e:30:ff:be:4b:c9:87:5d:86:
+                    a5:d0:f5:20:e6:79:a2:94:29:ec:5d:19:b0:e5:32:
+                    81:5a:34:8b:a7:06:20:33:f8:03:3e:0f:8e:e1:87:
+                    19:1c:0a:ab:94:f0:17:0b:67:62:9f:47:02:70:22:
+                    2c:d8:cb:55:51:19:b4:7f:62:f6:3a:18:e4:42:fd:
+                    5c:f7:f5:26:49:6e:6c:1f:90:f5:52:9a:85:fb:e0:
+                    05:22:24:6a:21:27:a7:03:c4:64:ba:5d:ae:20:ce:
+                    77:4d:25:50:4f:a4:d3:7a:11:e0:f7:51:1c:b1:8f:
+                    d2:19:73:70:4d:d0:55:4f:ef:14:0f:1e:7a:ce:5d:
+                    87:45:85:6b:ab:bd:d4:fc:0b:2e:c8:2b:7d:02:19:
+                    89:39:37:b0:93:ab:b4:e4:db:6b:c2:d3:99:db:87:
+                    db:ef:c5:c0:04:26:63:7a:dc:46:07:5d:09:ba:bd:
+                    f0:a1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5
+            X509v3 Authority Key Identifier: 
+                keyid:27:66:45:31:75:8A:E0:FB:D2:5F:C1:FB:72:52:0E:B1:1B:29:3A:A5
+
+            Authority Information Access: 
+                CA Issuers - URI:http://url-for-aia/Root.cer
+
+            X509v3 CRL Distribution Points: 
+
+                Full Name:
+                  URI:http://url-for-crl/Root.crl
+
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         94:72:28:25:43:3a:f3:7e:0c:ad:21:54:ac:c2:08:3b:6d:0a:
+         42:5c:4d:d5:73:3d:54:e3:c6:9d:52:3a:0e:f3:fc:e8:ea:bd:
+         20:9b:8b:cb:35:9a:4c:42:b4:7e:cf:09:4a:18:00:e1:97:be:
+         e7:7b:a9:34:f2:23:fc:87:a5:06:ca:8c:2c:67:3a:19:fc:a2:
+         69:ca:c9:3c:f5:aa:1b:7e:42:8a:dc:e4:3c:ce:37:f5:3b:f1:
+         2c:92:f2:e8:91:6e:9c:13:f8:f2:14:a8:4f:a4:bd:76:f8:12:
+         45:fb:30:45:d7:ce:4d:dd:5b:46:f1:89:9d:c5:29:d8:0f:77:
+         6b:71:07:ff:ab:2d:95:7f:ba:21:a1:8a:db:d7:af:1c:29:d2:
+         28:41:e1:e4:4e:4f:12:2c:ef:98:84:7c:f2:55:19:5b:46:34:
+         f8:1f:1d:3b:16:e4:27:8f:32:16:f8:4e:f4:14:22:bc:b6:c2:
+         1b:83:c1:e2:6a:23:64:51:65:af:7f:9d:21:a1:89:2e:8e:23:
+         8e:e6:20:3a:42:37:8e:f2:55:22:22:88:cd:04:da:a9:fd:5d:
+         fe:b3:36:6d:77:30:76:e4:a1:97:42:0e:7f:a5:b9:ac:26:88:
+         b9:3f:76:27:7b:fd:a7:95:f9:2b:17:58:89:fa:21:28:a0:17:
+         37:9f:50:11
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----