EV whitelist: Add pending EV roots.

Also scan Digicert's log as it's pending inclusion.
Should have added a comment: The zip creator already adds a zip extension, so this one is not necessary.