Check cert->isRoot to skip extraneous root certificates in certificate

net/data/ssl/certificates/images_etrade_wallst_com.pem

Index: net/data/ssl/certificates/images_etrade_wallst_com.pem
===================================================================
--- net/data/ssl/certificates/images_etrade_wallst_com.pem	(revision 0)
+++ net/data/ssl/certificates/images_etrade_wallst_com.pem	(revision 0)
@@ -0,0 +1,94 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            01:00:00:00:00:01:29:f1:78:64:fa
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: OU=Organization Validation CA, O=GlobalSign, CN=GlobalSign Organization Validation CA
+        Validity
+            Not Before: Jul 20 19:40:43 2010 GMT
+            Not After : Jul 20 19:40:39 2012 GMT
+        Subject: C=US, ST=Colorado, L=Boulder, OU=P3, O=Wall Street On Demand, Inc., CN=images.etrade.wallst.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:f4:4d:15:13:29:29:5f:01:56:18:aa:5e:ff:fc:
+                    ab:ca:6d:36:f1:44:05:5c:b1:86:28:f6:ac:b2:54:
+                    fa:93:94:d1:7a:c2:92:e2:8a:67:08:0e:fb:74:9d:
+                    0d:5b:ec:86:a4:dc:2b:75:37:c1:77:18:e4:aa:c7:
+                    9f:a1:76:77:21:ed:ed:5a:d1:07:45:63:35:35:9f:
+                    50:1c:ea:80:75:9f:d8:a6:ff:07:8d:a7:79:b4:89:
+                    f7:24:ec:2b:d6:d2:37:d1:14:07:4a:79:d4:8e:75:
+                    95:08:bc:bb:f3:aa:49:b1:71:c0:e5:d8:6b:2e:9c:
+                    c6:75:d4:cb:1b:05:8e:a8:f1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:7D:6D:2A:EC:66:AB:A7:51:36:AB:02:69:F1:70:8F:C4:59:0B:9A:1F
+
+            Authority Information Access: 
+                CA Issuers - URI:http://secure.globalsign.net/cacert/orgv1.crt
+
+            X509v3 CRL Distribution Points: 
+                URI:http://crl.globalsign.net/OrganizationVal1.crl
+
+            X509v3 Subject Key Identifier: 
+                62:F0:08:B5:F9:A6:F6:0A:8E:59:38:57:17:C5:79:04:B9:C6:B6:7B
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Key Usage: critical
+                Digital Signature, Key Encipherment
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication, Microsoft Server Gated Crypto
+            X509v3 Certificate Policies: 
+                Policy: 1.3.6.1.4.1.4146.1.20
+                  CPS: http://www.globalsign.net/repository/
+
+            Netscape Cert Type: 
+                SSL Client, SSL Server
+            X509v3 Subject Alternative Name: 
+                DNS:images.etrade.wallst.com
+    Signature Algorithm: sha1WithRSAEncryption
+        03:0b:00:f3:45:94:bf:1a:e1:87:10:c9:a3:47:9f:af:2b:25:
+        8c:19:03:1b:45:89:05:1c:3a:d5:ae:06:ac:c4:45:9a:30:90:
+        ea:85:36:3b:51:b9:c6:ff:65:9f:ce:60:27:44:be:57:56:f5:
+        9c:ae:03:e2:f8:a2:65:58:76:15:bb:83:3e:d5:56:99:c8:3c:
+        8f:e0:76:15:9d:a4:4b:10:9d:69:7a:a2:cd:98:1f:a9:41:97:
+        0c:01:15:c1:dc:69:0c:20:fc:c1:dc:80:51:2e:dc:44:dd:af:
+        6d:54:11:78:66:67:b3:2e:e1:4a:0c:ce:76:50:4e:4a:5c:64:
+        9c:05:b2:67:9f:c7:ef:06:58:69:95:32:af:8d:d9:ed:8d:81:
+        9e:84:15:10:7d:33:69:fe:ff:ec:99:3f:31:c7:5a:06:28:c9:
+        26:a6:5e:a8:7e:70:6e:30:11:d6:dc:6a:0c:76:fb:3a:cd:5a:
+        86:a8:57:c9:7b:4b:43:c4:90:d9:20:8c:84:5a:cf:fc:d5:0b:
+        a7:a0:54:49:f3:a9:55:cb:ec:cb:13:ad:d4:29:91:f8:47:df:
+        b6:63:87:19:c1:5b:0b:70:46:c7:32:a8:b9:0f:4c:a2:3f:39:
+        4e:70:c0:f0:42:e5:e3:a1:98:ac:d2:8d:98:89:ac:5e:a1:b9:
+        df:39:d7:89
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----