Check cert->isRoot to skip extraneous root certificates in certificate

net/data/ssl/certificates/globalsign_orgv1_ca.pem

Index: net/data/ssl/certificates/globalsign_orgv1_ca.pem
===================================================================
--- net/data/ssl/certificates/globalsign_orgv1_ca.pem	(revision 0)
+++ net/data/ssl/certificates/globalsign_orgv1_ca.pem	(revision 0)
@@ -0,0 +1,97 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            04:00:00:00:00:01:11:df:e8:6c:66
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
+        Validity
+            Not Before: Apr 11 12:00:00 2007 GMT
+            Not After : Jan 27 11:00:00 2014 GMT
+        Subject: OU=Organization Validation CA, O=GlobalSign, CN=GlobalSign Organization Validation CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:a1:2f:c4:bc:ce:87:03:e9:67:c1:89:c8:e5:93:
+                    fc:7d:b4:ad:9e:f6:63:4e:6a:e8:9c:2c:73:89:a2:
+                    01:f4:8f:21:f8:fd:25:9d:58:16:6d:86:f6:ee:49:
+                    57:75:7e:75:ea:22:11:7e:3d:fb:c7:42:41:dc:fc:
+                    c5:0c:91:55:80:7b:eb:64:33:1d:9b:f9:ca:38:e9:
+                    ab:c6:25:43:51:25:40:f4:e4:7e:18:55:6a:a9:8f:
+                    10:3a:40:1e:d6:57:83:ef:7f:2f:34:2f:2d:d2:f6:
+                    53:c2:19:0d:b7:ed:c9:81:f5:46:2c:b4:23:42:5e:
+                    9d:13:03:75:ec:ea:6a:fc:57:7c:c9:36:97:3b:98:
+                    dc:13:13:ec:ec:41:fa:5d:34:ea:b9:93:e7:10:16:
+                    65:cc:9c:92:fd:f5:c5:9d:3e:4a:b9:09:fc:e4:5f:
+                    1e:69:5f:4d:f4:56:72:44:b1:1d:23:03:c8:36:f6:
+                    65:88:c8:bf:39:16:45:8e:1e:26:6c:51:16:c5:2a:
+                    00:38:c5:a4:13:69:95:7d:ab:01:3b:a8:c4:14:b4:
+                    80:da:ac:1a:44:20:d5:fe:a9:06:7b:14:27:af:e0:
+                    30:21:dd:90:f4:a9:d5:23:19:2e:1e:03:e6:c1:df:
+                    95:29:e4:c1:94:43:dd:3e:90:aa:cb:4b:c9:be:8a:
+                    d3:39
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Subject Key Identifier: 
+                7D:6D:2A:EC:66:AB:A7:51:36:AB:02:69:F1:70:8F:C4:59:0B:9A:1F
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.4146.1.20
+                  CPS: http://www.globalsign.net/repository/
+
+            X509v3 CRL Distribution Points: 
+                URI:http://crl.globalsign.net/root.crl
+
+            Netscape Cert Type: 
+                SSL CA
+            X509v3 Extended Key Usage: 
+                Microsoft Server Gated Crypto, Netscape Server Gated Crypto
+            X509v3 Authority Key Identifier: 
+                keyid:60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
+
+    Signature Algorithm: sha1WithRSAEncryption
+        37:a8:8f:36:79:00:3c:18:e8:1a:c5:f2:7b:22:28:6b:bf:19:
+        8f:17:9a:ed:a6:c4:d6:a1:d6:63:2d:7b:fb:04:5b:28:da:cc:
+        f9:b6:ee:02:54:19:de:6c:91:f2:61:0d:fd:7f:28:20:cc:8f:
+        36:d1:61:87:a0:59:49:aa:07:96:de:f9:b3:2c:f9:b5:ee:15:
+        29:33:cd:b4:13:9d:c7:90:ce:4d:7c:f2:5a:11:87:7b:fa:d4:
+        8d:d1:2f:55:99:1a:5f:ef:16:08:b1:3d:d2:3d:1e:cb:b5:f0:
+        57:97:52:3a:12:63:62:b6:f2:bc:cd:e2:a6:9c:17:ce:28:e0:
+        c6:0f:5a:ec:bf:70:bd:5a:e7:54:be:f1:cf:c6:3d:9f:5f:7a:
+        da:b7:2e:65:ea:c2:d3:e9:c7:ba:be:4d:cb:da:33:ae:55:9d:
+        ae:14:f6:32:08:62:e1:89:e4:34:2a:75:3c:2a:05:a9:2b:50:
+        38:bb:59:86:a6:84:5a:84:c3:bd:43:ba:9f:1f:15:05:ce:b5:
+        77:0d:d4:dd:2f:49:c8:fe:58:95:4b:bc:4e:96:13:00:1e:9c:
+        b8:27:77:71:1d:c4:61:cb:f4:1e:8c:33:b3:00:67:0d:b7:b2:
+        ac:8c:3d:3a:dc:38:2f:64:2d:00:81:89:35:d8:e2:b9:31:17:
+        fe:3a:5f:d1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----