Adding withknown.com

... and sites hosted at withknown.com
* assets is on Amazon AWS and is (stupidly) configured for a forced endpoint
* docs is a vanity domain for Read the Docs
* stream has a mismatched (*.squirming.net) and self-signed cert

Considering the above, you might wish to restrict the coverage to (www\.)?, unless you know of other domains with valid certs.