Add end to end tests for CertBlacklist functionality

This adds a test public key to the default list of blacklisted CAs
(private key in src/test/resources/blacklist_ca_key.pem) and adds a
number of end to end tests that TrustManagerImpl enforces blacklists in
chains. This test key will also be used by CTS to ensure that the
default X509TrustManager properly enforces the blacklist.

(cherry picked from commit 1c4c0a23e4cd4f99e87ee770ea462c6351152c13)
Bug: 29443053
Change-Id: I67dcb7ef8da490544791a4c90c74ffa7582a1826
8 files changed