Go will reject certificate chains containing eight distrusted SPKIs

We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preventing them from being returned to the ca...