https://www.eff.org/deeplinks/2011/04/unqualified-names-ssl-observatory