De-prioritize 2.23.140.1.1 when searching for EV policy.

This fixes an issue where Symantec issued certificates containing
multiple EV policy OIDs were not being recognized as EV.

BUG=705285

Review-Url: https://codereview.chromium.org/2772283004
Cr-Commit-Position: refs/heads/master@{#459987}
(cherry picked from commit 58d31a73a5143a2faee4f41fa5a2072aa8a34a9e)

Review-Url: https://codereview.chromium.org/2781093003 .
Cr-Commit-Position: refs/branch-heads/3029@{#474}
Cr-Branched-From: 939b32ee5ba05c396eef3fd992822fcca9a2e262-refs/heads/master@{#454471}
9 files changed