Reject certificates that contain unknown policy qualifiers if the

net/cert/internal/parsed_certificate.cc

Index: net/cert/internal/parsed_certificate.cc
diff --git a/net/cert/internal/parsed_certificate.cc b/net/cert/internal/parsed_certificate.cc
index 53f0dd549d0fd67e4d94ae404898bcbad9d17bbf..c8cd67ecebbb06c4b63135f56c6996c428d28b9d 100644
--- a/net/cert/internal/parsed_certificate.cc
+++ b/net/cert/internal/parsed_certificate.cc
@@ -189,8 +189,9 @@ scoped_refptr<ParsedCertificate> ParsedCertificate::CreateInternal(
     // Policies.
     if (result->GetExtension(CertificatePoliciesOid(), &extension)) {
       result->has_policy_oids_ = true;
-      if (!ParseCertificatePoliciesExtension(extension.value,
-                                             &result->policy_oids_)) {
+      if (!ParseCertificatePoliciesExtension(
+              extension.value, false /*fail_parsing_unknown_qualifier_oids*/,
+              &result->policy_oids_)) {
         return nullptr;
       }
     }