Reject certificates that are valid for too long.

net/data/ssl/certificates/40_months_after_2015_04.pem

Index: net/data/ssl/certificates/40_months_after_2015_04.pem
diff --git a/net/data/ssl/certificates/40_months_after_2015_04.pem b/net/data/ssl/certificates/40_months_after_2015_04.pem
new file mode 100644
index 0000000000000000000000000000000000000000..870fefab1ca61c7d88a5d02a09e75947563ec65f
--- /dev/null
+++ b/net/data/ssl/certificates/40_months_after_2015_04.pem
@@ -0,0 +1,82 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 8 (0x8)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Apr  2 00:00:00 2015 GMT
+            Not After : Aug  1 00:00:00 2018 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ca:f6:72:04:1c:c2:c0:19:16:2a:2c:f4:c2:6d:
+                    39:46:7e:c5:df:2f:5e:47:1c:9f:38:56:fd:22:69:
+                    fc:ba:f1:50:fb:93:33:13:8e:f7:c0:c7:3f:54:68:
+                    89:f7:d0:1a:59:98:f2:57:a3:4b:01:c5:0a:85:a9:
+                    44:85:4e:60:8b:87:60:c3:a7:90:d1:4b:92:a1:22:
+                    26:ac:87:bb:30:f9:55:78:57:d3:38:14:3d:d9:6a:
+                    6e:90:76:75:54:2e:9c:ba:95:d2:65:37:54:de:07:
+                    e5:b0:a1:91:c1:d6:f1:e2:2e:93:49:9e:4e:c3:66:
+                    92:19:77:b4:ee:7d:18:99:37:27:2e:04:59:a0:ea:
+                    c7:d4:6c:56:c6:72:6f:0f:b3:5e:3b:c0:1a:26:4d:
+                    6b:4d:c4:7f:66:1f:e3:72:83:0a:39:b5:08:4d:c2:
+                    c0:49:b9:32:33:e3:7a:ba:00:36:b2:c3:0b:bd:d0:
+                    4a:d2:88:e7:bd:f9:6a:32:99:8a:c3:aa:9e:7a:1d:
+                    ae:71:35:d6:3a:a9:c1:ea:a6:2f:18:e1:15:a2:b7:
+                    db:8e:02:3b:ab:aa:a4:2c:d6:4f:60:d2:8d:bc:4a:
+                    0d:7c:d8:5e:0a:fb:fe:83:96:10:1f:d5:14:ab:0e:
+                    74:da:b8:b4:51:25:ec:ad:76:13:dd:1a:c7:55:e4:
+                    26:c7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                29:36:90:2F:BA:C1:EA:FD:D8:E1:4F:5E:D7:C2:9A:15:EA:1A:35:3C
+            X509v3 Authority Key Identifier: 
+                keyid:CA:0B:EE:C3:20:AD:63:FC:89:FA:71:69:49:E6:38:78:EC:F9:C6:55
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         a5:a6:54:39:60:ca:39:94:e0:da:01:a1:3a:7b:1f:c1:33:61:
+         4f:8d:57:2e:20:31:4f:11:29:bd:c3:8c:db:90:48:b3:3d:d6:
+         c9:ad:0b:5e:45:d3:fa:ee:1e:b4:ed:44:bf:21:d1:6a:b7:87:
+         bc:38:97:95:e1:d1:02:26:58:ac:b6:fc:01:8a:f1:cf:b6:a2:
+         1a:b5:01:6c:fb:ce:33:61:be:d6:88:63:a7:94:76:2f:62:c2:
+         2b:53:fb:d5:f8:12:0d:bd:d1:31:73:2c:65:87:a7:09:e2:49:
+         9f:7a:38:c5:91:65:d8:69:10:93:ec:99:eb:17:c9:af:b3:1b:
+         5e:34:2a:94:31:e8:8e:d2:19:86:46:c8:9b:0f:10:1f:ed:d3:
+         c8:d6:98:11:93:86:5d:49:01:19:db:01:c4:73:82:b2:41:6d:
+         be:0d:45:b0:4c:ad:e9:77:25:0f:a8:ff:a6:8e:60:8f:ca:58:
+         19:b2:cb:9b:88:a2:44:2b:a2:2f:58:aa:09:6a:2a:55:51:e3:
+         7c:68:35:8a:83:09:c9:c7:44:ae:ea:9c:58:b5:4f:33:0f:24:
+         f9:ee:9f:11:a0:28:04:98:7d:f8:e9:9c:48:d3:7c:8e:08:18:
+         b9:92:21:40:75:0f:36:96:ff:0f:ff:30:23:5c:0b:9d:e5:9a:
+         5e:24:50:e3
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----