GitLab

Netscape Server Gated Crypto (2.16.840.1.113730.4.1) is a deprecated
mechanism that is still in use by some unexpired (intermediate)
certificates. It is not part of the RFC 5280 profile for internet PKI.

This change adds a warning for the chain(s) in the certificate that are relying on nsSGC in place of server auth.

Bug: 733403
Change-Id: I2994f7f5e2981eecf24bb9839e266d4292cad7f8
Reviewed-on: https://chromium-review.googlesource.com/593207Reviewed-by: Matt Mueller <mattm@chromium.org>
Commit-Queue: Eric Roman <eroman@chromium.org>
Cr-Commit-Position: refs/heads/master@{#491141}