diff --git a/data/actalis b/data/actalis
new file mode 100644
index 00000000..4dd1f0a6
--- /dev/null
+++ b/data/actalis
@@ -0,0 +1,2 @@
+actalis.com
+actalis.it
diff --git a/data/amazon b/data/amazon
index e009c9c5..3020f12c 100644
--- a/data/amazon
+++ b/data/amazon
@@ -1,4 +1,5 @@
 include:amazon-ads
+include:amazontrust
 include:aws
 include:imdb
 include:kindle
@@ -88,7 +89,6 @@ amazonpay.com
 amazonpay.in
 amazonsdi.com
 amazonstudiosguilds.com
-amazontrust.com
 amazonvideodirect.com
 amzn.asia
 amzn.com
diff --git a/data/amazontrust b/data/amazontrust
new file mode 100644
index 00000000..0d7f965e
--- /dev/null
+++ b/data/amazontrust
@@ -0,0 +1,2 @@
+amazontrust.com
+ss2.us
diff --git a/data/apple b/data/apple
index 9569dbbf..f2c5ab58 100644
--- a/data/apple
+++ b/data/apple
@@ -1,5 +1,6 @@
 include:apple-ads
 include:apple-dev
+include:apple-pki
 include:beats
 include:icloud
 include:itunes
@@ -878,8 +879,6 @@ full:mesu-cdn.apple.com.akadns.net @cn
 full:mesu-china.apple.com.akadns.net @cn
 full:mesu.apple.com @cn
 full:music.apple.com @cn
-full:ocsp-lb.apple.com.akadns.net @cn
-full:ocsp.apple.com @cn
 full:oscdn.apple.com @cn
 full:oscdn.origin-apple.com.akadns.net @cn
 full:pancake.apple.com @cn
diff --git a/data/apple-pki b/data/apple-pki
new file mode 100644
index 00000000..f4f7f321
--- /dev/null
+++ b/data/apple-pki
@@ -0,0 +1,6 @@
+full:certs-lb.apple.com.akadns.net @cn
+full:certs.apple.com @cn
+full:crl-lb.apple.com.akadns.net @cn
+full:crl.apple.com @cn
+full:ocsp-lb.apple.com.akadns.net @cn
+full:ocsp.apple.com @cn
diff --git a/data/category-cas b/data/category-cas
index cb14c04b..307e6ca6 100644
--- a/data/category-cas
+++ b/data/category-cas
@@ -1,17 +1,27 @@
 # This list contains well-known Certificate Authorities (CA) outside China mainland.
 
 # Reference: https://en.wikipedia.org/wiki/Certificate_authority
+include:actalis
+include:amazontrust
+include:apple-pki
 include:buypass
+include:certum
 include:comodo
 include:cybertrust
 include:digicert
 include:entrust
 include:globalsign
+include:godaddy
+include:google-trust-services
+include:hinet-eca
+include:hongkongpost
 include:identrust
 include:letsencrypt
 include:secom
 include:sectigo
+include:sslcom
 include:swisssign
 include:telekom
 include:trustwave
+include:twca
 include:verisign
diff --git a/data/certum b/data/certum
new file mode 100644
index 00000000..fd1d916b
--- /dev/null
+++ b/data/certum
@@ -0,0 +1,2 @@
+certum.pl
+ocsp-certum.com
diff --git a/data/globalsign b/data/globalsign
index 7246acd3..08a8c0b1 100644
--- a/data/globalsign
+++ b/data/globalsign
@@ -1,3 +1,4 @@
+alphassl.com
 globalsign-media.com
 globalsign.be
 globalsign.ch
@@ -12,6 +13,8 @@ globalsign.fr
 globalsign.net
 globalsign.nl
 
-full:secure.globalsign.com @cn
+full:crl2.alphassl.com @cn
 full:ocsp.globalsign.com @cn
 full:ocsp2.globalsign.com @cn
+full:secure.globalsign.com @cn
+full:secure2.alphassl.com @cn
diff --git a/data/google b/data/google
index 37b6389b..2123a1fb 100644
--- a/data/google
+++ b/data/google
@@ -8,6 +8,7 @@ include:golang
 include:google-ads
 include:google-registry
 include:google-scholar
+include:google-trust-services
 include:kaggle
 include:opensourceinsights
 include:polymer
@@ -551,7 +552,6 @@ full:clickserve.dartsearch.net @cn
 full:clientservices.googleapis.com @cn
 full:connectivitycheck.gstatic.com @cn
 full:corp.google.com @cn
-full:crl.pki.goog @cn
 full:csi.gstatic.com @cn
 full:dl.google.com @cn
 full:dl.l.google.com @cn
@@ -570,7 +570,6 @@ full:googletagservices.com @cn
 full:gstaticadssl.l.google.com @cn
 full:gtm.oasisfeng.com @cn
 full:imasdk.googleapis.com @cn
-full:ocsp.pki.goog @cn
 full:pagead-googlehosted.l.google.com @cn
 full:pki-goog.l.google.com @cn
 full:recaptcha.net @cn
diff --git a/data/google-trust-services b/data/google-trust-services
new file mode 100644
index 00000000..ce47adc4
--- /dev/null
+++ b/data/google-trust-services
@@ -0,0 +1,4 @@
+pki.goog
+
+full:crl.pki.goog @cn
+full:ocsp.pki.goog @cn
diff --git a/data/hinet b/data/hinet
index 3fb81df9..f8d831a3 100644
--- a/data/hinet
+++ b/data/hinet
@@ -1,3 +1,5 @@
+include:hinet-eca
+
 cht.com.tw
 chtf.org.tw
 emome.net
diff --git a/data/hinet-eca b/data/hinet-eca
new file mode 100644
index 00000000..cef3b886
--- /dev/null
+++ b/data/hinet-eca
@@ -0,0 +1,4 @@
+full:eca.hinet.net
+full:gtlsca.nat.gov.tw
+full:ocsp.eca.hinet.net
+full:ocsp.gtlsca.nat.gov.tw
diff --git a/data/hongkongpost b/data/hongkongpost
new file mode 100644
index 00000000..09cd3729
--- /dev/null
+++ b/data/hongkongpost
@@ -0,0 +1,2 @@
+hongkongpost.gov.hk
+ecert.gov.hk
diff --git a/data/sectigo b/data/sectigo
index 0ce930f5..dd2bfa0e 100644
--- a/data/sectigo
+++ b/data/sectigo
@@ -4,4 +4,6 @@ instantssl.com
 optimumssl.com
 positivessl.com
 sectigo.com
+trust-provider.cn @cn
+trust-provider.com
 usertrust.com
diff --git a/data/sslcom b/data/sslcom
new file mode 100644
index 00000000..70cc3d18
--- /dev/null
+++ b/data/sslcom
@@ -0,0 +1,2 @@
+ssl.com
+sslcom.cn @cn
diff --git a/data/twca b/data/twca
new file mode 100644
index 00000000..a65b1ca2
--- /dev/null
+++ b/data/twca
@@ -0,0 +1 @@
+twca.com.tw