payload:
    - +.digicert-cn.com
    - +.digicert-validation.com
    - +.digicert.com
    - +.digicert.eu
    - +.digitalcertvalidation.com
    - +.freessl.com
    - +.geotrust.com
    - +.rapidssl.com
    - +.thawte.com
    - +.thawte.de
    - +.thawte.fr
    - +.quovadisglobal.com
    - +.public-trust.com
    - +.omniroot.com
    - +.symauth.com
    - +.symcb.com
    - +.symcd.com
    - +.digicert.co.jp
    - +.cybertrust.co.jp
    - +.cybertrust.ne.jp
    - +.adobe-crl.verisign.com
    - +.certipath-aia.verisign.com
    - +.certipath-crl.verisign.com
    - +.crl.verisign.com
    - +.csc3-2004-aia.verisign.com
    - +.csc3-2004-crl.verisign.com
    - +.csc3-2009-2-aia.verisign.com
    - +.csc3-2009-2-crl.verisign.com
    - +.csc3-2009-aia.verisign.com
    - +.csc3-2009-crl.verisign.com
    - +.csc3-2010-aia.verisign.com
    - +.csc3-2010-crl.verisign.com
    - +.eca-client-crl.verisign.com
    - +.eca-client-ocsp.verisign.com
    - +.evintl-aia.verisign.com
    - +.evintl-crl.verisign.com
    - +.evintl-ocsp.verisign.com
    - +.evintl-t1-crl.verisign.com
    - +.evsecure-aia.verisign.com
    - +.evsecure-crl.verisign.com
    - +.evsecure-ocsp.verisign.com
    - +.evsecure-t1-aia.verisign.com
    - +.evsecure-t1-crl.verisign.com
    - +.ocsp.verisign.com
    - +.onsitecrl.verisign.com
    - +.orgc3-crl.verisign.com
    - +.pki-ocsp.verisign.com
    - +.ssp-aia.verisign.com
    - +.ssp-crl.verisign.com
    - +.ssp-ocsp.verisign.com
    - +.svr-wimax-ocsp.verisign.com
    - +.svrintl-aia.verisign.com
    - +.svrintl-crl.verisign.com
    - +.svrintl-g3-aia.verisign.com
    - +.svrintl-g3-crl.verisign.com
    - +.svrintl-t1-aia.verisign.com
    - +.svrintl-t1-crl.verisign.com
    - +.svrsecure-aia.verisign.com
    - +.svrsecure-crl.verisign.com
    - +.svrsecure-g2-aia.verisign.com
    - +.svrsecure-g2-crl.verisign.com
    - +.svrsecure-g3-aia.verisign.com
    - +.svrsecure-g3-crl.verisign.com
    - +.svrsecure-oracle-aia.verisign.com
    - +.svrsecure-oracle-crl.verisign.com
    - +.svrsecure-oracle-ocsp.verisign.com
    - +.svrsecure-t1-aia.verisign.com
    - +.svrsecure-t1-crl.verisign.com
    - +.svrtrial-g2-aia.verisign.com
    - +.svrtrial-g2-crl.verisign.com
    - +.pki.symantec.com
    - +.ws.symantec.com
    - +.dcocsp.cn
    - +.digicert.cn