Blacklist semi-private intermediate issuers from issuing for Google domains.

net/http/transport_security_state_static.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file is automatically generated by transport_security_state_static_generate.go
 
 #ifndef NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 #define NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_
 
 // These are SubjectPublicKeyInfo hashes for public key pinning. The
@@ skipping 28 matching lines @@
     "\x7c\x8c\x08\x31\x9d\xcb\xbe\xde\x8a\x33";
 
 static const char kSPKIHash_GoogleG2[] =
     "\x43\xda\xd6\x30\xee\x53\xf8\xa9\x80\xca"
     "\x6e\xfd\x85\xf4\x6a\xa3\x79\x90\xe0\xea";
 
 static const char kSPKIHash_ThawteSGCCA[] =
     "\x87\x31\xea\x0e\x3d\xf5\xe8\x70\x3e\x83"
     "\x72\x57\x77\xa9\x65\x3b\x3b\xfa\x5e\x14";
 
+static const char kSPKIHash_VeriSignClass3SSPIntermediateCA[] =
+    "\x99\x6a\x20\x6a\x85\x57\x62\xcb\x9a\xf2"
+    "\x02\x37\xb3\xc0\x69\x5d\xa9\x1e\xc2\x22";
+
 static const char kSPKIHash_EquifaxSecureCA[] =
     "\x48\xe6\x68\xf9\x2b\xd2\xb2\x95\xd7\x47"
     "\xd8\x23\x20\x10\x4f\x33\x98\x90\x9f\xd4";
 
 static const char kSPKIHash_Aetna[] =
     "\x92\x52\xaa\x14\xde\xbf\x80\xae\x30\xaa"
     "\xd9\x4e\x60\x38\x70\x24\xa5\x43\x2f\x1a";
 
 static const char kSPKIHash_GeoTrustGlobal[] =
     "\xc0\x7a\x98\x68\x8d\x89\xfb\xab\x05\x64"
@@ skipping 211 matching lines @@
   kSPKIHash_EquifaxSecureCA,
   kSPKIHash_GeoTrustGlobal,
   NULL,
 };
 static const char* const kGoogleRejectedCerts[] = {
   kSPKIHash_Aetna,
   kSPKIHash_Intel,
   kSPKIHash_TCTrustCenter,
   kSPKIHash_Vodafone,
   kSPKIHash_ThawteSGCCA,
+  kSPKIHash_VeriSignClass3SSPIntermediateCA,
   NULL,
 };
 #define kGooglePins { \
   kGoogleAcceptableCerts, \
   kGoogleRejectedCerts, \
 }
 
 static const char* const kTorAcceptableCerts[] = {
   kSPKIHash_RapidSSL,
   kSPKIHash_DigiCertEVRoot,
@@ skipping 579 matching lines @@
   {11, false, "\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {16, false, "\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {15, false, "\003www\005gmail\003com", true, kGooglePins, DOMAIN_GMAIL_COM },
   {20, false, "\003www\012googlemail\003com", true, kGooglePins, DOMAIN_GOOGLEMAIL_COM },
   {22, true, "\020google-analytics\003com", false, kGooglePins, DOMAIN_GOOGLE_ANALYTICS_COM },
   {18, true, "\014googlegroups\003com", false, kGooglePins, DOMAIN_GOOGLEGROUPS_COM },
 };
 static const size_t kNumPreloadedSNISTS = ARRAYSIZE_UNSAFE(kPreloadedSNISTS);
 
 #endif // NET_HTTP_TRANSPORT_SECURITY_STATE_STATIC_H_