They do have this program, though you are allowed to pay other CAs if you want. Symantec sells certificates (they bought Verisign), which will whitelist you, but it is not required that you get your certificate from them.