{
  "version": 2,
  "rules": [
    {
      "domain": [
        "c.pki.goog",
        "cdn.globalsigncdn.com.cdn.cloudflare.net",
        "certs-lb.apple.com.akadns.net",
        "certs.apple.com",
        "clients1.google.com",
        "crl-lb.apple.com.akadns.net",
        "crl.apple.com",
        "crl.globalsign.net",
        "crl.microsoft.com",
        "crl.pki.goog",
        "crls.pki.goog",
        "i.pki.goog",
        "mscrl.microsoft.com",
        "o.pki.goog",
        "ocsp.apple.com",
        "ocsp.microsoft.com",
        "ocsp.pki.goog",
        "ocsp2.apple.com",
        "oneocsp.microsoft.com",
        "pki-goog.l.google.com",
        "pki.google.com",
        "preprod-publicca.googleapis.com",
        "publicca.googleapis.com",
        "valid.apple.com",
        "valid.origin-apple.com.akadns.net",
        "www.entrust.cn",
        "www.microsoft.com"
      ]
    },
    {
      "domain_suffix": [
        "accv.es",
        "actalis.com",
        "actalis.it",
        "adobe-crl.verisign.com",
        "affirmtrust.com",
        "alphassl.com",
        "amazontrust.com",
        "aoc.cat",
        "atos.net",
        "awstrust.com",
        "buypass-ssl.com",
        "buypass.com",
        "buypass.no",
        "buypass.se",
        "camerfirma.com",
        "catcert.cat",
        "certificat2.com",
        "certinomis.com",
        "certinomis.fr",
        "certipath-aia.verisign.com",
        "certipath-crl.verisign.com",
        "certsign.ro",
        "certum.pl",
        "comodoca.com",
        "comodoca2.com",
        "comodoca3.com",
        "comodoca4.com",
        "crl.verisign.com",
        "csc3-2004-aia.verisign.com",
        "csc3-2004-crl.verisign.com",
        "csc3-2009-2-aia.verisign.com",
        "csc3-2009-2-crl.verisign.com",
        "csc3-2009-aia.verisign.com",
        "csc3-2009-crl.verisign.com",
        "csc3-2010-aia.verisign.com",
        "csc3-2010-crl.verisign.com",
        "cybertrust.co.jp",
        "cybertrust.ne.jp",
        "d-trust.net",
        "dcocsp.cn",
        "digicert-cn.com",
        "digicert-validation.com",
        "digicert.cn",
        "digicert.co.jp",
        "digicert.com",
        "digicert.eu",
        "digital-id.ch",
        "digitalcertvalidation.com",
        "digitalid.ch",
        "e-szigno.hu",
        "e-tugra.com",
        "easy-signing.com",
        "eca-client-crl.verisign.com",
        "eca-client-ocsp.verisign.com",
        "eca.hinet.net",
        "ecert.gov.hk",
        "enterprisessl.com",
        "entrust.cn",
        "entrust.com",
        "entrust.net",
        "entrustdatacard.com",
        "evintl-aia.verisign.com",
        "evintl-crl.verisign.com",
        "evintl-ocsp.verisign.com",
        "evintl-t1-crl.verisign.com",
        "evsecure-aia.verisign.com",
        "evsecure-crl.verisign.com",
        "evsecure-ocsp.verisign.com",
        "evsecure-t1-aia.verisign.com",
        "evsecure-t1-crl.verisign.com",
        "firmaprofesional.com",
        "fnmt.es",
        "freessl.com",
        "gandi.net",
        "geotrust.com",
        "globalsign-media.com",
        "globalsign.be",
        "globalsign.ch",
        "globalsign.cloud",
        "globalsign.cn",
        "globalsign.co.uk",
        "globalsign.com",
        "globalsign.com.au",
        "globalsign.com.br",
        "globalsign.com.hk",
        "globalsign.com.sg",
        "globalsign.es",
        "globalsign.eu",
        "globalsign.fr",
        "globalsign.net",
        "globalsign.nl",
        "globalsigncdn.com",
        "godaddy",
        "godaddy.com",
        "godaddy.net",
        "gtlsca.nat.gov.tw",
        "hackerguardian.com",
        "harica.gr",
        "hongkongpost.gov.hk",
        "identrust.co.uk",
        "identrust.com",
        "identrust.net",
        "incommon-rsa.org",
        "infocert.digital",
        "infocert.it",
        "instantssl.com",
        "lencr.org",
        "letsencrypt.com",
        "letsencrypt.org",
        "managed-pki.ch",
        "managed-pki.de",
        "managedpki.com",
        "managedpki.ne.jp",
        "minid.no",
        "msocsp.com",
        "myatos.net",
        "myvodafone.com.au",
        "myvodafone.com.ws",
        "netlock.hu",
        "netsolssl.com",
        "ocsp-certum.com",
        "ocsp-responder.com",
        "ocsp.verisign.com",
        "oemssl.cn",
        "oemssl.cn.cdn.cloudflare.net",
        "omniroot.com",
        "onsitecrl.verisign.com",
        "optimumssl.com",
        "orgc3-crl.verisign.com",
        "pki-ocsp.verisign.com",
        "pki-post.ch",
        "pki-posta.ch",
        "pki-poste.ch",
        "pki.goog",
        "pki.hinet.net",
        "pki.symantec.com",
        "positivessl.com",
        "public-trust.com",
        "publicca.hinet.net",
        "quovadisglobal.com",
        "rapidssl.com",
        "root-signing.ch",
        "rootsigning.com",
        "secom.co.jp",
        "secomtrust.net",
        "sectigo.com",
        "sectigochina.com",
        "sectigochina.com.cdn.cloudflare.net",
        "ss2.us",
        "ssl-certificate.ch",
        "ssl.com",
        "sslcom.cn",
        "ssp-aia.verisign.com",
        "ssp-crl.verisign.com",
        "ssp-ocsp.verisign.com",
        "starfieldtech.com",
        "svr-wimax-ocsp.verisign.com",
        "svrintl-aia.verisign.com",
        "svrintl-crl.verisign.com",
        "svrintl-g3-aia.verisign.com",
        "svrintl-g3-crl.verisign.com",
        "svrintl-t1-aia.verisign.com",
        "svrintl-t1-crl.verisign.com",
        "svrsecure-aia.verisign.com",
        "svrsecure-crl.verisign.com",
        "svrsecure-g2-aia.verisign.com",
        "svrsecure-g2-crl.verisign.com",
        "svrsecure-g3-aia.verisign.com",
        "svrsecure-g3-crl.verisign.com",
        "svrsecure-oracle-aia.verisign.com",
        "svrsecure-oracle-crl.verisign.com",
        "svrsecure-oracle-ocsp.verisign.com",
        "svrsecure-t1-aia.verisign.com",
        "svrsecure-t1-crl.verisign.com",
        "svrtrial-g2-aia.verisign.com",
        "svrtrial-g2-crl.verisign.com",
        "swissid.ch",
        "swissign.com",
        "swissign.li",
        "swisssign-group.ch",
        "swisssign-group.com",
        "swisssign-group.li",
        "swisssign.ch",
        "swisssign.com",
        "swisssign.li",
        "swisssign.net",
        "swisssign.org",
        "swisssigner.ch",
        "swisssigner.com",
        "swisssigngroup.ch",
        "swisssigngroup.com",
        "swissstick.com",
        "swisstsa.ch",
        "swisstsa.li",
        "symauth.com",
        "symcb.com",
        "symcd.com",
        "telekom.com",
        "telekom.de",
        "telesec.de",
        "thawte.com",
        "thawte.de",
        "thawte.fr",
        "tls.hinet.net",
        "trendmicro.com",
        "trust-provider.cn",
        "trust-provider.com",
        "trustcor.ca",
        "trustcor.com",
        "trustdoc.ch",
        "trustisfps.com",
        "trustsign.ch",
        "trustwave.com",
        "twca.com.tw",
        "usertrust.com",
        "vodafone.co.uk",
        "vodafone.com",
        "vodafone.com.au",
        "vodafone.com.tr",
        "vodafone.de",
        "vodafone.it",
        "vodafone.nl",
        "wisecoin.com",
        "wiseid.com",
        "wisekey.com",
        "wisekey.com.hk",
        "ws.symantec.com",
        "wsimg.com",
        "x.co",
        "zert.ch"
      ]
    }
  ]
}