EV whitelist: Add pending EV roots.

Also scan Digicert's log as it's pending inclusion.
Store certificate description in protobuf.