allow for extended subdomains in whitelist