EV whitelist: Add pending EV roots.

Also scan Digicert's log as it's pending inclusion.