use HostNameComparisonMode.Exact to allow subdomain usage