Go will reject certificate chains containing eight distrusted SPKIs

We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preve...