fingerprint records are valid for all subdomains