DO NOT MERGE. Blacklist diginotar root and cross-signed certs.

Backported the certificate blacklist code to block diginotar and
comodo root certs. Also blocks cross-signed certs based on
the fingerprint of the public key.

Now blocks the PKIoverheid cert as well.

Backport of 34c261b1a00029744cfb7de1a69dca4b3ffb51a1.

Change-Id: Id0c3c6675387f03f4f0ecfd4a993cbfbb08af315
1 file changed