Remove the StartCom/WoSign whitelist

net/data/ssl/certificates/README

 This directory contains various certificates for use with SSL-related
 unit tests.
 
 ===== Real-world certificates that need manual updating
 - google.binary.p7b
 - google.chain.pem
 - google.pem_cert.p7b
 - google.pem_pkcs7.p7b
 - google.pkcs7.p7b
 - google.single.der
@@ skipping 51 matching lines @@
 
 - tripadvisor-verisign-chain.pem: A certificate chain for www.tripadvisor.com
   issued by VeriSign Class 3 Public Primary Certification Authority - G5.
   Expires Apr 2 2018.
 - verisign_class3_g5_crosssigned.pem: The SHA1 cross-signed version of
   VeriSign Class 3 Public Primary Certification Authority - G5
 - verisign_class3_g5_crosssigned-trusted.keychain: OSX Keychain set to Always
   Trust the certificate in verisign_class3_g5_crosssigned.pem (Generated by
   scripts/generate-verisign_class3_g5_crosssigned-trusted-keychain.sh)
 
-- wosign_before_oct_21.pem
-- wosign_after_oct_21.pem
-    Two certificates issued by WoSign CA Ltd, before and after the
-    2016-10-21 00:00:00 UTC sunset for trust in this CA.
-
 ===== Manually generated certificates
 - client.p12 : A PKCS #12 file containing a client certificate and a private
      key created for testing.  The password is "12345".
 
 - client-nokey.p12 : A PKCS #12 file containing a client certificate (the same
      as the one in client.p12) but no private key. The password is "12345".
 
 - client-empty-password.p12 : A PKCS #12 file containing an unencrypted client
      certificate and a encrypted private key.  The password is the empty string,
      encoded as two zero bytes.  (PKCS#12 passwords are encoded as
@@ skipping 239 matching lines @@
      aia-cert.pem has a caIssuers that points to "aia-test.invalid" as the URL
      containing the intermediate, which can be served via a URLRequestFilter.
      aia-intermediate.der is stored in DER form for convenience, since that is
      the form expected of certificates discovered via AIA.
 
 ===== From net/data/ssl/scripts/generate-self-signed-certs.sh
  - self-signed-invalid-name.pem
  - self-signed-invalid-sig.pem
      Two "self-signed" certificates with mismatched names or an invalid
      signature, respectively.