fixed comparison of domains (was case sensitive)
added option for sign rules to allow also subdomains of the SDIDs (enabled by default)
updated default sign rules