Remove the CNNIC whitelist

net/data/ssl/blacklist/README.md

 # Certificate Blacklist
 
 This directory contains a number of certificates and public keys which are
 considered blacklisted within Chromium-based products. 
 
 When applicable, additional information and the full certificate or key
 are included.
 
 ## Compromises & Misissuances
 
+### China Internet Network Information Center (CNNIC)
+
+For details, see <https://security.googleblog.com/2015/03/maintaining-digital-certificate-security.html>
+
+As a result of misissuance of a sub-CA certificate, CNNIC end-entity
+certificates were temporarily whitelisted, and then trust in the root fully
+removed.
+
+  * [1c01c6f4dbb2fefc22558b2bca32563f49844acfc32b7be4b0ff599f9e8c7af7.pem](1c01c6f4dbb2fefc22558b2bca32563f49844acfc32b7be4b0ff599f9e8c7af7.pem)
+  * [e28393773da845a679f2080cc7fb44a3b7a1c3792cb7eb7729fdcb6a8d99aea7.pem](e28393773da845a679f2080cc7fb44a3b7a1c3792cb7eb7729fdcb6a8d99aea7.pem)
+
 ### Comodo
 
 For details, see <https://www.comodo.com/Comodo-Fraud-Incident-2011-03-23.html>,
 <https://blog.mozilla.org/security/2011/03/25/comodo-certificate-issue-follow-up/>,
 and <https://technet.microsoft.com/en-us/library/security/2524375.aspx>.
 
 As the result of a compromise of a partner RA of Comodo, nine certificates were
 misissued, for a variety of online services.
 
   * [2a3699deca1e9fd099ba45de8489e205977c9f2a5e29d5dd747381eec0744d71.pem](2a3699deca1e9fd099ba45de8489e205977c9f2a5e29d5dd747381eec0744d71.pem)
@@ skipping 165 matching lines @@
   * [7abd72a323c9d179c722564f4e27a51dd4afd24006b38a40ce918b94960bcf18.pem](7abd72a323c9d179c722564f4e27a51dd4afd24006b38a40ce918b94960bcf18.pem)
 
 ### T-Systems
 
 For details, see <https://bugzilla.mozilla.org/show_bug.cgi?id=1076940>
 
 This intermediate certificate was retired by T-Systems, and blacklisted
 for robustness at their request.
 
   * [f4a5984324de98bd979ef181a100cf940f2166173319a86a0d9d7c8fac3b0a8f.pem](f4a5984324de98bd979ef181a100cf940f2166173319a86a0d9d7c8fac3b0a8f.pem)