EV whitelist: Add pending EV roots.

Also scan Digicert's log as it's pending inclusion.
What's this change about?