Reject certificates that are valid for too long.

net/data/ssl/certificates/pre_br_validity_bad_121.pem

Index: net/data/ssl/certificates/pre_br_validity_bad_121.pem
diff --git a/net/data/ssl/certificates/pre_br_validity_bad_121.pem b/net/data/ssl/certificates/pre_br_validity_bad_121.pem
new file mode 100644
index 0000000000000000000000000000000000000000..2c84c2babc9c17b5f1414fecfd8666787c2f2470
--- /dev/null
+++ b/net/data/ssl/certificates/pre_br_validity_bad_121.pem
@@ -0,0 +1,82 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 10 (0xa)
+    Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test Root CA
+        Validity
+            Not Before: Jan  1 00:00:00 2008 GMT
+            Not After : May  1 00:00:00 2018 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:e0:4b:de:53:9a:c3:32:75:8a:df:91:7b:fa:47:
+                    88:9c:d5:ac:88:6e:84:21:65:07:96:c6:0b:09:f9:
+                    16:b6:3b:1b:ae:9f:3e:48:8b:ac:ef:2e:71:38:3a:
+                    f9:21:b0:71:61:cd:1f:0f:fa:cc:48:d0:f4:2a:0f:
+                    82:90:3a:e5:f4:c5:12:d7:8e:d5:fb:9c:28:82:8e:
+                    49:2a:1f:38:81:21:ca:df:79:30:5d:33:ce:d4:20:
+                    1a:22:65:25:72:fe:72:9b:a2:56:50:c9:4f:cb:ed:
+                    75:18:be:1e:7d:c6:62:26:a8:9d:2d:1a:a4:ab:02:
+                    c2:1d:da:a7:dd:06:6a:0b:f2:97:91:27:dc:f0:c5:
+                    a0:5c:17:fd:18:71:a6:c4:1f:71:27:01:9f:4d:ee:
+                    77:64:51:4d:28:fc:f8:bb:8a:ab:ca:97:f4:ae:58:
+                    89:c0:3a:20:0c:d6:6b:56:c2:ff:d7:b1:6b:78:c8:
+                    2f:4f:46:67:a3:37:7f:66:8b:6b:4d:8d:35:c2:d0:
+                    f1:7b:d7:b8:f2:b0:75:e6:b8:77:bc:16:38:4d:83:
+                    ab:36:3d:48:e2:28:02:a3:35:88:53:aa:e8:01:a0:
+                    a1:2c:99:b1:9d:92:fe:9e:eb:a1:84:90:f5:32:0e:
+                    ff:a2:64:c5:12:7c:8b:57:40:75:bd:e7:81:c0:83:
+                    e2:35
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                0F:E1:A5:2E:CA:40:B3:BF:40:51:3A:6B:85:09:E2:D1:00:8F:7D:25
+            X509v3 Authority Key Identifier: 
+                keyid:EE:54:52:3A:28:73:20:9D:56:2D:2A:98:F4:9C:B1:7D:FB:C5:22:47
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha256WithRSAEncryption
+         35:f9:a3:c9:fb:f1:1d:52:2e:ce:a4:a6:f3:2a:eb:ec:19:39:
+         fd:4a:c6:ca:f4:2a:b1:cc:c5:62:8e:51:89:ec:8b:2c:11:87:
+         a6:df:7b:ad:5d:91:e0:ed:86:71:4c:89:1f:fa:cd:0d:08:02:
+         cb:c1:74:e4:80:c5:80:48:fb:63:63:c1:f7:c4:71:9b:ea:b6:
+         0e:6b:4f:e3:89:f5:fd:77:a3:fb:50:d1:bc:ec:64:a1:04:f7:
+         e8:e9:5d:57:fd:14:67:1c:19:25:a4:3e:90:31:0a:32:09:46:
+         c7:de:ca:f3:b7:47:d8:bd:5f:e3:45:4f:a9:37:8f:76:d1:bb:
+         0c:a0:3a:70:49:32:a6:ba:35:49:70:2a:cb:c3:b4:02:25:6d:
+         99:f9:4e:ff:49:d9:a0:b4:f5:fb:a5:bf:36:a5:c9:44:29:9a:
+         f8:82:3d:9e:bb:92:33:84:e7:77:7c:26:de:8d:00:78:a8:1b:
+         bd:e8:61:1b:ff:c2:b6:63:97:73:8a:ae:fe:23:07:58:fe:1c:
+         28:70:83:0c:c3:dc:e2:15:4e:2a:a8:9c:79:ba:5b:a1:66:cb:
+         7e:52:61:3a:a7:57:3b:70:1f:6a:e5:b2:57:61:00:be:d0:04:
+         c3:61:aa:50:40:52:a5:c8:8d:b9:3a:a6:48:72:70:21:af:ba:
+         fd:86:8d:57
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----