Does this have to live at the root of a site? e.g. https://support.mozilla.org/issuer.json