Correct syntax for Strict-Transport-Security and subdomains

At least on a Debian Wheezy, the previous line does not pass `apache2ctl configtest`.