test.dev.httpbin.org should not match *.httpbin.org; that's just not the way certificates work.

I wish it was. :)