Reject certificates that are valid for too long.

net/data/ssl/certificates/61_months_after_2012_07.pem

Index: net/data/ssl/certificates/61_months_after_2012_07.pem
diff --git a/net/data/ssl/certificates/61_months_after_2012_07.pem b/net/data/ssl/certificates/61_months_after_2012_07.pem
new file mode 100644
index 0000000000000000000000000000000000000000..eebdbc375bfbbf1a28929e3007b9d33693682422
--- /dev/null
+++ b/net/data/ssl/certificates/61_months_after_2012_07.pem
@@ -0,0 +1,82 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 10 (0xa)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Oct 30 00:00:00 2014 GMT
+            Not After : Dec 19 23:35:24 2019 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ce:0e:90:96:f2:40:37:c6:86:dd:af:b7:23:d5:
+                    01:87:bc:1e:9f:0d:f1:4b:eb:6f:85:14:64:fe:e4:
+                    47:f7:52:a8:52:22:9c:2e:6f:b5:f6:36:c0:70:27:
+                    e5:a9:8a:da:bd:04:06:1e:97:a4:48:06:56:2d:2a:
+                    d1:81:2f:be:4e:22:68:34:54:de:38:df:1e:84:b7:
+                    5f:17:89:a7:98:62:db:94:9e:ac:df:91:a6:d5:91:
+                    b5:c7:ae:89:6e:30:c1:5a:37:23:b8:d9:f8:b4:53:
+                    1b:f7:63:4f:2b:f9:c3:c7:37:1f:66:c7:e1:1c:d9:
+                    2b:68:b9:e5:58:65:68:e9:01:0b:fb:24:01:57:bc:
+                    c5:94:b8:c8:27:dd:c9:b4:44:16:30:2b:cd:11:62:
+                    68:48:07:22:4b:b7:e5:e9:42:34:17:4e:f3:c9:d1:
+                    77:7d:97:9a:ec:ec:58:35:5b:3e:2c:21:31:fe:57:
+                    98:16:3f:fc:cb:00:7b:4d:6b:d9:99:3e:29:69:ae:
+                    ef:01:64:4c:f7:cd:18:15:bd:48:19:e3:db:c1:a2:
+                    d2:40:c2:69:53:43:39:cd:a6:c2:3a:57:23:39:27:
+                    7c:9f:1f:21:3f:bc:e1:f9:0b:37:59:f0:fc:c1:6f:
+                    cf:2e:a9:59:d2:0d:32:dd:70:64:9a:e7:e8:eb:e4:
+                    69:53
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                37:7B:6E:B4:DC:15:72:1F:4E:DB:39:37:A4:B1:F2:B7:7C:F8:C3:D5
+            X509v3 Authority Key Identifier: 
+                keyid:CA:0B:EE:C3:20:AD:63:FC:89:FA:71:69:49:E6:38:78:EC:F9:C6:55
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         90:d9:88:2f:6e:fe:22:5c:be:f3:97:f7:50:4e:a2:de:cc:7b:
+         33:c3:27:f3:38:15:46:f7:02:44:d4:87:84:23:15:44:8c:17:
+         6f:10:bc:15:1a:83:bd:6d:94:dd:f4:9f:aa:91:01:85:80:27:
+         88:af:e1:7a:54:9f:04:97:10:8b:05:b1:a2:4f:04:ff:36:a9:
+         c6:79:7d:2f:a1:49:f5:9a:ff:bb:5c:d8:f6:3f:54:d0:27:13:
+         fc:90:4b:e1:3f:ea:c8:98:65:3b:28:44:26:cb:45:14:62:f4:
+         b4:71:3a:d8:68:a2:ec:51:64:a3:d8:3b:80:a4:17:36:89:d3:
+         8b:de:2a:1b:dc:2d:3f:4b:9e:ab:34:09:8c:44:30:da:1a:09:
+         2f:61:cf:4b:7d:2f:14:7e:10:a3:a9:df:c6:db:68:77:43:92:
+         d1:df:93:ee:a6:54:f4:4d:cc:ea:a8:7a:b5:75:fc:25:1f:8e:
+         6b:8e:50:ee:13:aa:7b:19:bc:63:0c:3f:b3:af:ee:2d:f3:42:
+         40:dd:de:26:18:44:e0:06:a7:4d:17:93:a3:9d:81:da:1f:7f:
+         81:55:46:5e:8f:44:5a:06:4a:fb:7c:43:95:20:97:d8:5b:d8:
+         c0:8c:31:03:21:ce:16:4a:f0:8f:41:69:6d:25:71:c9:79:3b:
+         82:d2:2c:22
+-----BEGIN CERTIFICATE-----
+MIIDczCCAlugAwIBAgIBCjANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDDAxUZXN0
+IFJvb3QgQ0EwHhcNMTQxMDMwMDAwMDAwWhcNMTkxMjE5MjMzNTI0WjBgMQswCQYD
+VQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNTW91bnRhaW4g
+VmlldzEQMA4GA1UECgwHVGVzdCBDQTESMBAGA1UEAwwJMTI3LjAuMC4xMIIBIjAN
+BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg6QlvJAN8aG3a+3I9UBh7wenw3x
+S+tvhRRk/uRH91KoUiKcLm+19jbAcCflqYravQQGHpekSAZWLSrRgS++TiJoNFTe
+ON8ehLdfF4mnmGLblJ6s35Gm1ZG1x66JbjDBWjcjuNn4tFMb92NPK/nDxzcfZsfh
+HNkraLnlWGVo6QEL+yQBV7zFlLjIJ93JtEQWMCvNEWJoSAciS7fl6UI0F07zydF3
+fZea7OxYNVs+LCEx/leYFj/8ywB7TWvZmT4paa7vAWRM980YFb1IGePbwaLSQMJp
+U0M5zabCOlcjOSd8nx8hP7zh+Qs3WfD8wW/PLqlZ0g0y3XBkmufo6+RpUwIDAQAB
+o4GAMH4wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUN3tutNwVch9O2zk3pLHyt3z4
+w9UwHwYDVR0jBBgwFoAUygvuwyCtY/yJ+nFpSeY4eOz5xlUwHQYDVR0lBBYwFAYI
+KwYBBQUHAwEGCCsGAQUFBwMCMA8GA1UdEQQIMAaHBH8AAAEwDQYJKoZIhvcNAQEL
+BQADggEBAJDZiC9u/iJcvvOX91BOot7MezPDJ/M4FUb3AkTUh4QjFUSMF28QvBUa
+g71tlN30n6qRAYWAJ4iv4XpUnwSXEIsFsaJPBP82qcZ5fS+hSfWa/7tc2PY/VNAn
+E/yQS+E/6siYZTsoRCbLRRRi9LRxOthoouxRZKPYO4CkFzaJ04veKhvcLT9Lnqs0
+CYxEMNoaCS9hz0t9LxR+EKOp38bbaHdDktHfk+6mVPRNzOqoerV1/CUfjmuOUO4T
+qnsZvGMMP7Ov7i3zQkDd3iYYROAGp00Xk6Odgdoff4FVRl6PRFoGSvt8Q5Ugl9hb
+2MCMMQMhzhZK8I9BaW0lccl5O4LSLCI=
+-----END CERTIFICATE-----