An example:

test.dev.httpbin.org would not verify against *.httpbin.org

Is that expected, or a case we should consider valid?