use https://www.google-analytics.com instead of ssl.

The ssl.google-analytics.com domain is a legacy subdomain. It is still 100% supported.

The new tags (analytics.js) import //www.google-analytics.com/analytics.js which just inherits the protocol.  Fixing this will improve cache hits by routing requests to the same domain.

I added a rule for the old tags (ga.js), so it will have the correct cache hits.