net: add DigiCert to Twitter pins.

net/http/transport_security_state_static.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file contains the HSTS preloaded list in a machine readable format.
 
 // The top-level element is a dictionary with two keys: "pinsets" maps details
 // of certificate pinning to a name and "entries" contains the HSTS details for
 // each host.
 //
@@ skipping 73 matching lines @@
         "VeriSignClass2_G2",
         "VeriSignClass3_G5",
         "VeriSignUniversal",
         "GeoTrustGlobal",
         "GeoTrustGlobal2",
         "GeoTrustUniversal",
         "GeoTrustUniversal2",
         "GeoTrustPrimary",
         "GeoTrustPrimary_G2",
         "GeoTrustPrimary_G3",
+        "DigiCertGlobalRoot",
+        "DigiCertEVRoot",
+        "DigiCertAssuredIDRoot",
         "Twitter1"
       ]
     },
     {
       "name": "twitterCDN",
       "static_spki_hashes": [
         "VeriSignClass1",
         "VeriSignClass3",
         "VeriSignClass3_G4",
         "VeriSignClass4_G3",
         "VeriSignClass3_G3",
         "VeriSignClass1_G3",
         "VeriSignClass2_G3",
         "VeriSignClass3_G2",
         "VeriSignClass2_G2",
         "VeriSignClass3_G5",
         "VeriSignUniversal",
         "GeoTrustGlobal",
         "GeoTrustGlobal2",
         "GeoTrustUniversal",
         "GeoTrustUniversal2",
         "GeoTrustPrimary",
         "GeoTrustPrimary_G2",
         "GeoTrustPrimary_G3",
+        "DigiCertGlobalRoot",
+        "DigiCertEVRoot",
+        "DigiCertAssuredIDRoot",
         "Twitter1",
 
         "Entrust_2048",
         "Entrust_EV",
         "Entrust_G2",
         "Entrust_SSL",
         "AAACertificateServices",
         "AddTrustClass1CARoot",
         "AddTrustExternalCARoot",
         "AddTrustPublicCARoot",
@@ skipping 506 matching lines @@
 
     // Entries that are only valid if the client supports SNI.
     { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true },
     { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
   ]
 }