Reject certificates that are valid for too long.

net/data/ssl/certificates/60_months_after_2012_07.pem

Index: net/data/ssl/certificates/60_months_after_2012_07.pem
diff --git a/net/data/ssl/certificates/60_months_after_2012_07.pem b/net/data/ssl/certificates/60_months_after_2012_07.pem
new file mode 100644
index 0000000000000000000000000000000000000000..38b5824f7a06f931309db962f0e6626c0df76d26
--- /dev/null
+++ b/net/data/ssl/certificates/60_months_after_2012_07.pem
@@ -0,0 +1,82 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 9 (0x9)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Oct 30 00:00:00 2014 GMT
+            Not After : Sep 30 00:00:00 2019 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:d0:ce:ff:98:a7:74:c4:bd:de:de:d3:b3:5a:fe:
+                    14:0f:ee:44:f8:08:cc:5e:bf:79:c9:be:0a:dc:ce:
+                    b9:73:c4:af:c2:3d:35:6a:6f:a3:ed:5e:21:63:a2:
+                    e1:39:c5:c3:0c:82:dd:da:e7:5f:c1:21:5d:34:0d:
+                    e9:e3:2a:bf:6f:a8:9e:5a:74:a9:6c:57:83:c1:35:
+                    f6:ce:58:78:0d:56:5a:f1:72:b9:62:12:76:50:fe:
+                    71:ef:e7:44:bb:47:e1:a4:fa:d6:03:5e:8f:a9:24:
+                    50:8f:e2:c2:8a:65:b6:57:8f:ee:0c:c9:2c:b9:9c:
+                    05:cf:38:36:c0:72:d6:fe:d6:da:2b:95:24:a4:93:
+                    d2:62:6d:a4:b0:03:d1:36:1e:75:16:91:3e:f6:0f:
+                    a0:b5:8f:77:75:af:b2:10:bc:78:9f:9c:73:31:ac:
+                    06:11:d9:32:29:9c:da:66:ff:fc:d8:b3:70:8f:f8:
+                    df:67:06:e1:9c:a1:ea:ec:f1:e8:92:52:aa:9e:35:
+                    c6:0c:d2:62:24:b0:ef:3e:9c:49:a7:b6:ee:de:2e:
+                    9c:56:6d:f5:0d:bb:e3:84:2b:b0:e2:7f:be:35:5a:
+                    02:50:d2:70:c4:a0:ed:a1:ab:28:99:d0:62:80:ef:
+                    c1:26:6a:39:ab:28:e0:73:86:f4:da:50:91:ac:b4:
+                    e3:21
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                F3:14:F0:CF:F0:35:C1:32:21:09:26:7C:D4:17:38:F6:09:58:FB:F4
+            X509v3 Authority Key Identifier: 
+                keyid:85:AE:CA:C3:6C:F0:FC:C1:65:AF:18:CA:AB:FF:25:3F:54:9A:BF:EC
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         a0:ae:29:07:a4:72:63:78:32:8c:41:e1:e0:43:9f:e7:a3:88:
+         c7:75:25:55:e7:22:eb:18:8a:d3:af:11:e4:08:bd:70:4a:dc:
+         90:3f:14:64:3b:ad:22:57:09:68:cf:94:1e:b9:93:2d:41:c2:
+         f9:04:7e:a1:51:48:ab:34:29:e4:34:c2:2c:7d:0f:34:fe:ae:
+         e9:c1:18:28:07:9f:96:71:76:76:2f:e7:7f:bd:9d:84:97:4a:
+         0c:b1:b3:2a:a9:c6:7e:78:9e:cb:f7:29:8a:82:74:15:8e:91:
+         bc:36:26:38:f4:c8:94:e0:02:ff:47:fb:1e:ca:fd:f9:fb:fe:
+         7d:15:cd:6f:36:7b:08:54:38:fd:ca:d0:c7:22:84:7e:58:5b:
+         f3:a4:7b:49:cb:9b:e0:23:36:2c:eb:b1:6d:34:12:7a:f1:12:
+         67:59:02:d9:9f:4d:3a:01:3e:06:aa:00:37:c0:be:fe:de:6c:
+         c6:b4:33:17:df:d2:b3:95:4c:ef:4a:8e:39:03:2c:2e:56:5c:
+         82:2e:c7:0b:be:51:52:05:8f:74:5d:5c:24:2d:15:4e:c4:41:
+         86:26:e6:96:28:91:a7:06:94:ab:14:7a:1f:0c:0b:aa:b5:97:
+         f0:25:b6:4a:15:8a:d8:b8:09:01:22:fc:4c:43:cf:de:45:dc:
+         0a:95:77:f6
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----