Block two retired DigiCert intermediates

net/data/ssl/blacklist/README.md

 # Certificate Blacklist
 
 This directory contains a number of certificates and public keys which are
 considered blacklisted within Chromium-based products. 
 
 When applicable, additional information and the full certificate or key
 are included.
 
 ## Compromises & Misissuances
 
@@ skipping 116 matching lines @@
 For details, see [https://raymii.org/s/blog/How_I_got_a_valid_SSL_certificate_for_my_ISPs_main_website.html]
 
 A user of xs4all was able to register a reserved email address that can be
 used to cause certificate issuance, as described in the CA/Browser Forum's
 Baseline Requirements, and then subsequently published the private key.
 
   * [83618f932d6947744d5ecca299d4b2820c01483947bd16be814e683f7436be24.pem]
 
 ## Miscellaneous
 
+### DigiCert
+
+For details, see [https://bugzilla.mozilla.org/show_bug.cgi?id=1242758] and
+[https://bugzilla.mozilla.org/show_bug.cgi?id=1224104]
+
+These two intermediates were retired by DigiCert, and blacklisted for
+robustness at their request.
+
+  * [159ca03a88897c8f13817a212629df84ce824709492b8c9adb8e5437d2fc72be.pem]
+  * [b8c1b957c077ea76e00b0f45bff5ae3acb696f221d2e062164fe37125e5a8d25.pem]
+
 ### Hacking Team
 
 The following keys were reported as used by Hacking Team to compromise users,
 and are blacklisted for robustness.
 
   * [c4387d45364a313fbfe79812b35b815d42852ab03b06f11589638021c8f2cb44.key]
   * [ea08c8d45d52ca593de524f0513ca6418da9859f7b08ef13ff9dd7bf612d6a37.key]
 
 ### live.fi
 
@@ skipping 28 matching lines @@
   * [7abd72a323c9d179c722564f4e27a51dd4afd24006b38a40ce918b94960bcf18.pem]
 
 ### T-Systems
 
 For details, see [https://bugzilla.mozilla.org/show_bug.cgi?id=1076940]
 
 This intermediate certificate was retired by T-Systems, and blacklisted
 for robustness at their request.
 
   * [f4a5984324de98bd979ef181a100cf940f2166173319a86a0d9d7c8fac3b0a8f.pem]