Reject certificates that are valid for too long.

net/data/ssl/certificates/61_months_after_2012_07.pem

Index: net/data/ssl/certificates/61_months_after_2012_07.pem
diff --git a/net/data/ssl/certificates/61_months_after_2012_07.pem b/net/data/ssl/certificates/61_months_after_2012_07.pem
new file mode 100644
index 0000000000000000000000000000000000000000..49dc04e53ed3140f208c6ed52ef82b0f41bc5caa
--- /dev/null
+++ b/net/data/ssl/certificates/61_months_after_2012_07.pem
@@ -0,0 +1,81 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7 (0x7)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Oct 30 00:00:00 2014 GMT
+            Not After : Nov  3 19:26:20 2019 GMT
+        Subject: CN=xn--wgv71a119e.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ca:83:f9:aa:c5:28:81:20:c9:a9:62:66:9b:10:
+                    75:c1:e7:9a:15:5b:ef:13:ce:c6:d1:aa:be:23:7b:
+                    ca:28:7b:bc:62:27:4a:9d:16:e0:ac:db:07:54:f1:
+                    3a:79:4f:24:4d:52:2c:35:12:aa:fd:cb:f7:98:5d:
+                    40:03:56:01:36:b1:1a:34:71:9c:98:5d:76:96:2f:
+                    91:ca:9f:49:e2:f0:1e:86:fc:d3:66:37:1a:27:b4:
+                    db:4d:b3:ca:85:04:59:b5:2f:35:32:d5:59:a6:31:
+                    f5:85:35:63:88:e5:0a:1b:3b:9a:7c:29:e2:6d:b3:
+                    ed:23:19:36:6d:62:fd:be:77:10:cc:69:2d:32:ce:
+                    98:59:29:ec:e4:27:e9:c2:ae:86:79:37:76:cb:ba:
+                    ee:86:5f:39:02:25:b2:50:aa:43:7e:77:fe:03:16:
+                    d1:05:56:b5:31:a0:0b:41:88:3e:69:b4:b9:89:70:
+                    d1:e5:7d:a7:77:ed:8d:13:db:20:3b:4b:c0:a0:6e:
+                    48:61:47:c2:6f:57:f4:4a:ac:bd:28:e3:0f:e4:40:
+                    3f:a3:05:86:46:1a:95:13:d1:be:76:69:92:d5:6b:
+                    71:59:1d:a0:fc:b7:4c:9a:e6:2b:f6:82:50:a9:35:
+                    19:9b:b4:3c:0d:0b:7a:10:0e:3d:84:2f:c3:68:61:
+                    2f:03
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                74:7C:2F:56:AE:BF:08:E2:6F:5B:D4:6C:B0:4C:04:3F:11:59:15:0E
+            X509v3 Authority Key Identifier: 
+                keyid:CC:56:4D:CF:92:F0:A5:B8:36:08:B0:46:B5:84:E2:4A:00:56:20:57
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         19:42:64:03:f7:2a:90:ee:82:93:de:69:49:28:32:42:ba:db:
+         37:16:0d:db:b3:81:ad:50:a8:b2:f7:20:35:e4:bb:89:7d:f3:
+         e5:75:7f:3e:bd:41:05:24:eb:5a:94:18:cc:c4:ac:d2:0a:24:
+         39:4b:2e:6d:a4:2f:99:6b:19:9e:c8:44:53:3f:15:52:c7:51:
+         af:37:64:a2:d7:27:74:72:6a:d0:cc:c0:ac:8b:7e:7c:0c:f1:
+         ee:e9:bf:03:19:20:e3:44:88:56:a2:1f:36:59:7f:35:22:13:
+         d1:48:a0:7a:59:16:85:df:31:e9:30:ae:df:54:b7:8b:78:a8:
+         20:27:5c:cc:0c:8b:43:65:4f:71:41:c2:5b:42:4a:a7:1b:f8:
+         44:e3:6b:50:1f:85:0f:e3:30:9a:5f:01:8a:19:80:b1:9d:d8:
+         34:c4:54:87:ff:ad:8a:56:d7:3b:9f:13:dd:0c:a5:b7:0d:a9:
+         a8:66:91:4a:0e:d4:7d:5c:40:39:5a:12:e1:ab:fc:88:9f:b7:
+         26:c7:11:f0:1b:7d:2d:29:77:20:97:0c:ea:14:d4:24:13:9f:
+         8f:b2:49:eb:3b:2b:79:d3:d2:ef:65:82:d7:75:09:26:61:9b:
+         ef:45:0d:95:65:1b:42:76:f6:db:98:fa:3f:45:c0:7b:8d:94:
+         9a:62:8a:88
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----