Update Certificate Services (#2560)

* Move "valid.apple.com" to apple-pki

* Update GlobalSign and Chunghwa Telecom PKI

* Move Comodo CA to Sectigo

- https://www.sectigo.com/comodo
- https://www.sectigo.com/knowledge-base/detail/OCSP-and-CRL-access-information/kA01N000000zFJr

* Update Entrust

* Update Visa CA

http://enroll.visaca.com/VisaPublicKeyInfrastructureCertificatePolicy.pdf

* Update DigiCert

- https://knowledge.digicert.com/alerts/digicert-certificate-status-ip-address (with attached csv file)
- https://knowledge.digicert.com/alerts/new-crl-and-ocsp-cdn-ip-addresses-pki-platform-7-and-8

* fix pull request issues

---------

Co-authored-by: yueisme <yue_isme@foxmail.com>

data/apple

@@ -1009,7 +1009,6 @@ full:tj-pod1-smp-device.apple.com @cn
 full:updates-http.cdn-apple.com @cn
 full:updates-http.cdn-apple.com.akadns.net @cn
 full:updates.cdn-apple.com @cn
-full:valid.apple.com @cn
 full:valid.origin-apple.com.akadns.net @cn
 full:weather-data.apple.com @cn
 full:weather-data.apple.com.akadns.net @cn

data/apple-pki

@@ -6,3 +6,4 @@ full:ocsp-lb.apple.com.akadns.net @cn
 full:ocsp.apple.com @cn
 full:ocsp2-lb.apple.com.akadns.net @cn
 full:ocsp2.apple.com @cn
+full:valid.apple.com @cn

data/category-cas

@@ -7,8 +7,6 @@ include:apple-pki
 include:buypass
 include:certinomis
 include:certum
-include:comodo
-include:cybertrust
 include:digicert
 include:entrust
 include:gandi
@@ -25,11 +23,9 @@ include:sectigo
 include:sslcom
 include:starfieldtech
 include:swisssign
-include:symantec
 include:telekom
 include:trustwave
 include:twca
-include:verisign
 include:verizon
 include:vodafone
 include:wisekey
@@ -45,6 +41,7 @@ fnmt.es
 harica.gr
 infocert.digital
 infocert.it
+managedpki.com
 netlock.hu
 trustcor.ca
 trustcor.com

data/category-companies

@@ -19,6 +19,7 @@ include:chegg
 include:cisco
 include:cloudcone
 include:collabora
+include:comodo
 include:corel
 include:dell
 include:digitalocean
@@ -76,11 +77,13 @@ include:spacex
 include:spaceship
 include:st
 include:synology
+include:symantec
 include:tailscale
 include:theboringcompany
 include:tonec
 include:uber
 include:ubiquiti
+include:verisign
 include:verizon
 include:vultr
 include:westerndigital

data/comodo

@@ -1,6 +1,2 @@
 comodo.com
 comodo.net
-comodoca.com
-comodoca2.com
-comodoca3.com
-comodoca4.com

data/digicert

@@ -2,7 +2,9 @@ dcocsp.cn @cn
 digicert-cn.com # Not in Chinese Mainland
 digicert-validation.com
 digicert.cn @cn
+digicert.co.jp
 digicert.com
+digicert.eu
 digitalcertvalidation.com
 freessl.com
 geotrust.com
@@ -11,8 +13,15 @@ thawte.com
 thawte.de
 thawte.fr
 
+include:cybertrust
+include:verisign-pki
+include:symantec-pki
+
 # Quovadis
 quovadisglobal.com
 
 # Public Trust
 public-trust.com
+
+# Verizon CA
+omniroot.com

data/entrust

@@ -1,5 +1,8 @@
+entrust.cn
+entrust.com
 entrust.net
 entrustdatacard.com
+full:www.entrust.cn @cn
 
 # Sub brand
 affirmtrust.com

data/globalsign

@@ -19,3 +19,4 @@ globalsign.nl
 globalsigncdn.com @cn
 
 full:cdn.globalsigncdn.com.cdn.cloudflare.net @cn
+full:crl.globalsign.net @cn

data/hinet-eca

@@ -1,2 +1,6 @@
+# Chunghwa Telecom PKI
 eca.hinet.net
 gtlsca.nat.gov.tw
+pki.hinet.net
+publicca.hinet.net
+tls.hinet.net

data/sectigo

@@ -17,3 +17,9 @@ aoc.cat
 catcert.cat
 incommon-rsa.org
 netsolssl.com
+
+# Comodo CA
+comodoca.com
+comodoca2.com
+comodoca3.com
+comodoca4.com

data/symantec

@@ -1,4 +1 @@
-managedpki.com
 symantec.com
-symcb.com
-symcd.com

data/symantec-pki

@@ -0,0 +1,6 @@
+# Symantec CA
+pki.symantec.com
+symauth.com
+symcb.com
+symcd.com
+ws.symantec.com

data/verisign-pki

@@ -0,0 +1,51 @@
+# Verisign CA
+adobe-crl.verisign.com
+certipath-aia.verisign.com
+certipath-crl.verisign.com
+crl.verisign.com
+csc3-2004-aia.verisign.com
+csc3-2004-crl.verisign.com
+csc3-2009-2-aia.verisign.com
+csc3-2009-2-crl.verisign.com
+csc3-2009-aia.verisign.com
+csc3-2009-crl.verisign.com
+csc3-2010-aia.verisign.com
+csc3-2010-crl.verisign.com
+eca-client-crl.verisign.com
+eca-client-ocsp.verisign.com
+evintl-aia.verisign.com
+evintl-crl.verisign.com
+evintl-ocsp.verisign.com
+evintl-t1-crl.verisign.com
+evsecure-aia.verisign.com
+evsecure-crl.verisign.com
+evsecure-ocsp.verisign.com
+evsecure-t1-aia.verisign.com
+evsecure-t1-crl.verisign.com
+ocsp.verisign.com
+onsitecrl.verisign.com
+orgc3-crl.verisign.com
+pki-ocsp.verisign.com
+ssp-aia.verisign.com
+ssp-crl.verisign.com
+ssp-ocsp.verisign.com
+svr-wimax-ocsp.verisign.com
+svrintl-aia.verisign.com
+svrintl-crl.verisign.com
+svrintl-g3-aia.verisign.com
+svrintl-g3-crl.verisign.com
+svrintl-t1-aia.verisign.com
+svrintl-t1-crl.verisign.com
+svrsecure-aia.verisign.com
+svrsecure-crl.verisign.com
+svrsecure-g2-aia.verisign.com
+svrsecure-g2-crl.verisign.com
+svrsecure-g3-aia.verisign.com
+svrsecure-g3-crl.verisign.com
+svrsecure-oracle-aia.verisign.com
+svrsecure-oracle-crl.verisign.com
+svrsecure-oracle-ocsp.verisign.com
+svrsecure-t1-aia.verisign.com
+svrsecure-t1-crl.verisign.com
+svrtrial-g2-aia.verisign.com
+svrtrial-g2-crl.verisign.com

data/verizon

@@ -15,6 +15,3 @@ verizonmedia.com
 verizonwireless.com
 vzw.com
 xo.com
-
-# PKI
-omniroot.com

data/visa

@@ -138,6 +138,7 @@ visa-atm.com
 visa-news.jp
 visabank.org
 visabusinessinsights.com
+visaca.com
 visacarddesignlab.com
 visacards.com
 visacheckout.net