CA list update (#1046)

* CA list update

* Update hinet

* Update hinet

Co-authored-by: rootmelo92118 <32770959+rootmelo92118@users.noreply.github.com>

data/actalis

@@ -0,0 +1,2 @@
+actalis.com
+actalis.it

data/amazon

@@ -1,4 +1,5 @@
 include:amazon-ads
+include:amazontrust
 include:aws
 include:imdb
 include:kindle
@@ -88,7 +89,6 @@ amazonpay.com
 amazonpay.in
 amazonsdi.com
 amazonstudiosguilds.com
-amazontrust.com
 amazonvideodirect.com
 amzn.asia
 amzn.com

data/amazontrust

@@ -0,0 +1,2 @@
+amazontrust.com
+ss2.us

data/apple

@@ -1,5 +1,6 @@
 include:apple-ads
 include:apple-dev
+include:apple-pki
 include:beats
 include:icloud
 include:itunes
@@ -878,8 +879,6 @@ full:mesu-cdn.apple.com.akadns.net @cn
 full:mesu-china.apple.com.akadns.net @cn
 full:mesu.apple.com @cn
 full:music.apple.com @cn
-full:ocsp-lb.apple.com.akadns.net @cn
-full:ocsp.apple.com @cn
 full:oscdn.apple.com @cn
 full:oscdn.origin-apple.com.akadns.net @cn
 full:pancake.apple.com @cn

data/apple-pki

@@ -0,0 +1,6 @@
+full:certs-lb.apple.com.akadns.net @cn
+full:certs.apple.com @cn
+full:crl-lb.apple.com.akadns.net @cn
+full:crl.apple.com @cn
+full:ocsp-lb.apple.com.akadns.net @cn
+full:ocsp.apple.com @cn

data/category-cas

@@ -1,17 +1,27 @@
 # This list contains well-known Certificate Authorities (CA) outside China mainland.
 
 # Reference: https://en.wikipedia.org/wiki/Certificate_authority
+include:actalis
+include:amazontrust
+include:apple-pki
 include:buypass
+include:certum
 include:comodo
 include:cybertrust
 include:digicert
 include:entrust
 include:globalsign
+include:godaddy
+include:google-trust-services
+include:hinet-eca
+include:hongkongpost
 include:identrust
 include:letsencrypt
 include:secom
 include:sectigo
+include:sslcom
 include:swisssign
 include:telekom
 include:trustwave
+include:twca
 include:verisign

data/certum

@@ -0,0 +1,2 @@
+certum.pl
+ocsp-certum.com

data/globalsign

@@ -1,3 +1,4 @@
+alphassl.com
 globalsign-media.com
 globalsign.be
 globalsign.ch
@@ -12,6 +13,8 @@ globalsign.fr
 globalsign.net
 globalsign.nl
 
-full:secure.globalsign.com @cn
+full:crl2.alphassl.com @cn
 full:ocsp.globalsign.com @cn
 full:ocsp2.globalsign.com @cn
+full:secure.globalsign.com @cn
+full:secure2.alphassl.com @cn

data/google

@@ -8,6 +8,7 @@ include:golang
 include:google-ads
 include:google-registry
 include:google-scholar
+include:google-trust-services
 include:kaggle
 include:opensourceinsights
 include:polymer
@@ -551,7 +552,6 @@ full:clickserve.dartsearch.net @cn
 full:clientservices.googleapis.com @cn
 full:connectivitycheck.gstatic.com @cn
 full:corp.google.com @cn
-full:crl.pki.goog @cn
 full:csi.gstatic.com @cn
 full:dl.google.com @cn
 full:dl.l.google.com @cn
@@ -570,7 +570,6 @@ full:googletagservices.com @cn
 full:gstaticadssl.l.google.com @cn
 full:gtm.oasisfeng.com @cn
 full:imasdk.googleapis.com @cn
-full:ocsp.pki.goog @cn
 full:pagead-googlehosted.l.google.com @cn
 full:pki-goog.l.google.com @cn
 full:recaptcha.net @cn

data/google-trust-services

@@ -0,0 +1,4 @@
+pki.goog
+
+full:crl.pki.goog @cn
+full:ocsp.pki.goog @cn

data/hinet

@@ -1,3 +1,5 @@
+include:hinet-eca
+
 cht.com.tw
 chtf.org.tw
 emome.net

data/hinet-eca

@@ -0,0 +1,4 @@
+full:eca.hinet.net
+full:gtlsca.nat.gov.tw
+full:ocsp.eca.hinet.net
+full:ocsp.gtlsca.nat.gov.tw

data/hongkongpost

@@ -0,0 +1,2 @@
+hongkongpost.gov.hk
+ecert.gov.hk

data/sectigo

@@ -4,4 +4,6 @@ instantssl.com
 optimumssl.com
 positivessl.com
 sectigo.com
+trust-provider.cn @cn
+trust-provider.com
 usertrust.com

data/sslcom

@@ -0,0 +1,2 @@
+ssl.com
+sslcom.cn @cn

data/twca

@@ -0,0 +1 @@
+twca.com.tw