// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// This file contains the HSTS preloaded list in a machine readable format.

// The top-level element is a dictionary with two keys: "pinsets" maps details
// of certificate pinning to a name and "entries" contains the HSTS details for
// each host.
//
// "pinsets" is a list of objects. Each object has the following members:
//   name: (string) the name of the pinset
//   static_spki_hashes: (list of strings) the set of allowed SPKIs hashes
//   bad_static_spki_hashes: (optional list of strings) the set of forbidden SPKIs hashes
//
// For a given pinset, a certifiacte is accepted if at least one of the
// "static_spki_hashes" SPKIs is found in the chain and none of the "bad_static_spki_hashes" SPKIs are.
// SPKIs are specified as names, which must match up with the file of
// certificates.
//
// "entries" is a list of objects. Each object has the following members:
//   name: (string) the DNS name of the host in question
//   include_subdomains: (optional bool) whether subdomains of |name| are also covered
//   mode: (optional string) "force-https" iff covered names should require HTTPS
//   pins: (optional string) the |name| member of an object in |pinsets|
//   snionly: (optional bool) if true then this entry is only enforced if TLS is
//       enabled because the site in question only serves the correct
//       certificate if SNI is sent. Note that this only covers the case where
//       TLS has been disabled by explicit configuration. If TLS was disabled
//       because of SSLv3 fallback, then the entry is still in force and a
//       fatal certificate error will result. Spurious certificate errors are
//       an unfortunate result of SSLv3 fallback.

{
  "pinsets": [
    {
      "name": "test",
      "static_spki_hashes": [
        "TestSPKI"
      ]
    },
    {
      "name": "google",
      "static_spki_hashes": [
        "VeriSignClass3",
        "VeriSignClass3_G3",
        "Google1024",
        "Google2048",
        "EquifaxSecureCA"
      ],
      "bad_static_spki_hashes": [
        "Aetna",
        "Intel",
        "TCTrustCenter",
        "Vodafone"
      ]
    },
    {
      "name": "tor",
      "static_spki_hashes": [
        "RapidSSL",
        "DigiCertEVRoot",
        "Tor1",
        "Tor2",
        "Tor3"
      ]
    },
    {
      "name": "twitterCom",
      "static_spki_hashes": [
        "VeriSignClass1",
        "VeriSignClass3",
        "VeriSignClass3_G4",
        "VeriSignClass4_G3",
        "VeriSignClass3_G3",
        "VeriSignClass1_G3",
        "VeriSignClass2_G3",
        "VeriSignClass3_G2",
        "VeriSignClass2_G2",
        "VeriSignClass3_G5",
        "VeriSignUniversal",
        "GeoTrustGlobal",
        "GeoTrustGlobal2",
        "GeoTrustUniversal",
        "GeoTrustUniversal2",
        "GeoTrustPrimary",
        "GeoTrustPrimary_G2",
        "GeoTrustPrimary_G3",
        "Twitter1"
      ]
    },
    {
      "name": "twitterCDN",
      "static_spki_hashes": [
        "VeriSignClass1",
        "VeriSignClass3",
        "VeriSignClass3_G4",
        "VeriSignClass4_G3",
        "VeriSignClass3_G3",
        "VeriSignClass1_G3",
        "VeriSignClass2_G3",
        "VeriSignClass3_G2",
        "VeriSignClass2_G2",
        "VeriSignClass3_G5",
        "VeriSignUniversal",
        "GeoTrustGlobal",
        "GeoTrustGlobal2",
        "GeoTrustUniversal",
        "GeoTrustUniversal2",
        "GeoTrustPrimary",
        "GeoTrustPrimary_G2",
        "GeoTrustPrimary_G3",
        "Twitter1",

        "Entrust_2048",
        "Entrust_EV",
        "Entrust_G2",
        "Entrust_SSL",
        "AAACertificateServices",
        "AddTrustClass1CARoot",
        "AddTrustExternalCARoot",
        "AddTrustPublicCARoot",
        "AddTrustQualifiedCARoot",
        "COMODOCertificationAuthority",
        "SecureCertificateServices",
        "TrustedCertificateServices",
        "UTNDATACorpSGC",
        "UTNUSERFirstClientAuthenticationandEmail",
        "UTNUSERFirstHardware",
        "UTNUSERFirstObject",
        "GTECyberTrustGlobalRoot"
      ]
    },
    {
      "name": "tor2web",
      "static_spki_hashes": [
        "AlphaSSL_G2",
        "Tor2web"
      ]
    },
    {
      "name": "cryptoCat",
      "static_spki_hashes": [
        "DigiCertEVRoot",
        "CryptoCat1"
      ]
    }
  ],

  "entries": [
    // Dummy entry to test certificate pinning.
    { "name": "pinningtest.appspot.com", "include_subdomains": true, "pins": "test" },

    // (*.)google.com, iff using SSL, must use an acceptable certificate.
    { "name": "google.com", "include_subdomains": true, "pins": "google" },

    // Now we force HTTPS for subtrees of google.com.
    { "name": "health.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "checkout.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "chrome.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "docs.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "sites.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "spreadsheets.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "appengine.google.com", "mode": "force-https", "pins": "google" },
    { "name": "encrypted.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "accounts.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "profiles.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "mail.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "talkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "talk.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "hostedtalkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "plus.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "script.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "history.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },

    // Other Google-related domains that must use HTTPS.
    { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "drive.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "groups.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "apis.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "force-https", "pins": "google" },
    // TODO(palmer): include_subdomains must be set to true when the
    // certificate for uploads.code.google.com is corrected. See
    // https://code.google.com/p/chromium/issues/detail?id=158594.
    { "name": "code.google.com", "include_subdomains": false, "mode": "force-https", "pins": "google" },
    { "name": "googlecode.com", "include_subdomains": true, "pins": "google" },

    // chart.apis.google.com is *not* HSTS because the certificate doesn't match
    // and there are lots of links out there that still use the name. The correct
    // hostname for this is chart.googleapis.com.
    { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "google" },

    // Other Google-related domains that must use an acceptable certificate
    // iff using SSL.
    { "name": "ytimg.com", "include_subdomains": true, "pins": "google" },
    { "name": "googleusercontent.com", "include_subdomains": true, "pins": "google" },
    { "name": "youtube.com", "include_subdomains": true, "pins": "google" },
    { "name": "googleapis.com", "include_subdomains": true, "pins": "google" },
    { "name": "googleadservices.com", "include_subdomains": true, "pins": "google" },
    { "name": "appspot.com", "include_subdomains": true, "pins": "google" },
    { "name": "googlesyndication.com", "include_subdomains": true, "pins": "google" },
    { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" },
    { "name": "ssl.gstatic.com", "include_subdomains": true, "pins": "google" },
    { "name": "youtu.be", "include_subdomains": true, "pins": "google" },
    { "name": "android.com", "include_subdomains": true, "pins": "google" },
    { "name": "googlecommerce.com", "include_subdomains": true, "pins": "google" },
    { "name": "urchin.com", "include_subdomains": true, "pins": "google" },
    { "name": "goo.gl", "include_subdomains": true, "pins": "google" },
    { "name": "g.co", "include_subdomains": true, "pins": "google" },
    { "name": "google.ac", "include_subdomains": true, "pins": "google" },
    { "name": "google.ad", "include_subdomains": true, "pins": "google" },
    { "name": "google.ae", "include_subdomains": true, "pins": "google" },
    { "name": "google.af", "include_subdomains": true, "pins": "google" },
    { "name": "google.ag", "include_subdomains": true, "pins": "google" },
    { "name": "google.am", "include_subdomains": true, "pins": "google" },
    { "name": "google.as", "include_subdomains": true, "pins": "google" },
    { "name": "google.at", "include_subdomains": true, "pins": "google" },
    { "name": "google.az", "include_subdomains": true, "pins": "google" },
    { "name": "google.ba", "include_subdomains": true, "pins": "google" },
    { "name": "google.be", "include_subdomains": true, "pins": "google" },
    { "name": "google.bf", "include_subdomains": true, "pins": "google" },
    { "name": "google.bg", "include_subdomains": true, "pins": "google" },
    { "name": "google.bi", "include_subdomains": true, "pins": "google" },
    { "name": "google.bj", "include_subdomains": true, "pins": "google" },
    { "name": "google.bs", "include_subdomains": true, "pins": "google" },
    { "name": "google.by", "include_subdomains": true, "pins": "google" },
    { "name": "google.ca", "include_subdomains": true, "pins": "google" },
    { "name": "google.cat", "include_subdomains": true, "pins": "google" },
    { "name": "google.cc", "include_subdomains": true, "pins": "google" },
    { "name": "google.cd", "include_subdomains": true, "pins": "google" },
    { "name": "google.cf", "include_subdomains": true, "pins": "google" },
    { "name": "google.cg", "include_subdomains": true, "pins": "google" },
    { "name": "google.ch", "include_subdomains": true, "pins": "google" },
    { "name": "google.ci", "include_subdomains": true, "pins": "google" },
    { "name": "google.cl", "include_subdomains": true, "pins": "google" },
    { "name": "google.cm", "include_subdomains": true, "pins": "google" },
    { "name": "google.cn", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ao", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.bw", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ck", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.cr", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.hu", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.id", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.il", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.im", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.in", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.je", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.jp", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ke", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.kr", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ls", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ma", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.mz", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.nz", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.th", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.tz", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ug", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.uk", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.uz", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.ve", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.vi", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.za", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.zm", "include_subdomains": true, "pins": "google" },
    { "name": "google.co.zw", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.af", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ag", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ai", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ar", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.au", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.bd", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.bh", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.bn", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.bo", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.br", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.by", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.bz", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.cn", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.co", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.cu", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.cy", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.do", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ec", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.eg", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.et", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.fj", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ge", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.gh", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.gi", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.gr", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.gt", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.hk", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.iq", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.jm", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.jo", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.kh", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.kw", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.lb", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ly", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.mt", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.mx", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.my", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.na", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.nf", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ng", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ni", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.np", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.nr", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.om", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.pa", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.pe", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ph", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.pk", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.pl", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.pr", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.py", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.qa", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ru", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.sa", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.sb", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.sg", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.sl", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.sv", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.tj", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.tn", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.tr", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.tw", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ua", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.uy", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.vc", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.ve", "include_subdomains": true, "pins": "google" },
    { "name": "google.com.vn", "include_subdomains": true, "pins": "google" },
    { "name": "google.cv", "include_subdomains": true, "pins": "google" },
    { "name": "google.cz", "include_subdomains": true, "pins": "google" },
    { "name": "google.de", "include_subdomains": true, "pins": "google" },
    { "name": "google.dj", "include_subdomains": true, "pins": "google" },
    { "name": "google.dk", "include_subdomains": true, "pins": "google" },
    { "name": "google.dm", "include_subdomains": true, "pins": "google" },
    { "name": "google.dz", "include_subdomains": true, "pins": "google" },
    { "name": "google.ee", "include_subdomains": true, "pins": "google" },
    { "name": "google.es", "include_subdomains": true, "pins": "google" },
    { "name": "google.fi", "include_subdomains": true, "pins": "google" },
    { "name": "google.fm", "include_subdomains": true, "pins": "google" },
    { "name": "google.fr", "include_subdomains": true, "pins": "google" },
    { "name": "google.ga", "include_subdomains": true, "pins": "google" },
    { "name": "google.ge", "include_subdomains": true, "pins": "google" },
    { "name": "google.gg", "include_subdomains": true, "pins": "google" },
    { "name": "google.gl", "include_subdomains": true, "pins": "google" },
    { "name": "google.gm", "include_subdomains": true, "pins": "google" },
    { "name": "google.gp", "include_subdomains": true, "pins": "google" },
    { "name": "google.gr", "include_subdomains": true, "pins": "google" },
    { "name": "google.gy", "include_subdomains": true, "pins": "google" },
    { "name": "google.hk", "include_subdomains": true, "pins": "google" },
    { "name": "google.hn", "include_subdomains": true, "pins": "google" },
    { "name": "google.hr", "include_subdomains": true, "pins": "google" },
    { "name": "google.ht", "include_subdomains": true, "pins": "google" },
    { "name": "google.hu", "include_subdomains": true, "pins": "google" },
    { "name": "google.ie", "include_subdomains": true, "pins": "google" },
    { "name": "google.im", "include_subdomains": true, "pins": "google" },
    { "name": "google.info", "include_subdomains": true, "pins": "google" },
    { "name": "google.iq", "include_subdomains": true, "pins": "google" },
    { "name": "google.is", "include_subdomains": true, "pins": "google" },
    { "name": "google.it", "include_subdomains": true, "pins": "google" },
    { "name": "google.it.ao", "include_subdomains": true, "pins": "google" },
    { "name": "google.je", "include_subdomains": true, "pins": "google" },
    { "name": "google.jo", "include_subdomains": true, "pins": "google" },
    { "name": "google.jobs", "include_subdomains": true, "pins": "google" },
    { "name": "google.jp", "include_subdomains": true, "pins": "google" },
    { "name": "google.kg", "include_subdomains": true, "pins": "google" },
    { "name": "google.ki", "include_subdomains": true, "pins": "google" },
    { "name": "google.kz", "include_subdomains": true, "pins": "google" },
    { "name": "google.la", "include_subdomains": true, "pins": "google" },
    { "name": "google.li", "include_subdomains": true, "pins": "google" },
    { "name": "google.lk", "include_subdomains": true, "pins": "google" },
    { "name": "google.lt", "include_subdomains": true, "pins": "google" },
    { "name": "google.lu", "include_subdomains": true, "pins": "google" },
    { "name": "google.lv", "include_subdomains": true, "pins": "google" },
    { "name": "google.md", "include_subdomains": true, "pins": "google" },
    { "name": "google.me", "include_subdomains": true, "pins": "google" },
    { "name": "google.mg", "include_subdomains": true, "pins": "google" },
    { "name": "google.mk", "include_subdomains": true, "pins": "google" },
    { "name": "google.ml", "include_subdomains": true, "pins": "google" },
    { "name": "google.mn", "include_subdomains": true, "pins": "google" },
    { "name": "google.ms", "include_subdomains": true, "pins": "google" },
    { "name": "google.mu", "include_subdomains": true, "pins": "google" },
    { "name": "google.mv", "include_subdomains": true, "pins": "google" },
    { "name": "google.mw", "include_subdomains": true, "pins": "google" },
    { "name": "google.ne", "include_subdomains": true, "pins": "google" },
    { "name": "google.ne.jp", "include_subdomains": true, "pins": "google" },
    { "name": "google.net", "include_subdomains": true, "pins": "google" },
    { "name": "google.nl", "include_subdomains": true, "pins": "google" },
    { "name": "google.no", "include_subdomains": true, "pins": "google" },
    { "name": "google.nr", "include_subdomains": true, "pins": "google" },
    { "name": "google.nu", "include_subdomains": true, "pins": "google" },
    { "name": "google.off.ai", "include_subdomains": true, "pins": "google" },
    { "name": "google.pk", "include_subdomains": true, "pins": "google" },
    { "name": "google.pl", "include_subdomains": true, "pins": "google" },
    { "name": "google.pn", "include_subdomains": true, "pins": "google" },
    { "name": "google.ps", "include_subdomains": true, "pins": "google" },
    { "name": "google.pt", "include_subdomains": true, "pins": "google" },
    { "name": "google.ro", "include_subdomains": true, "pins": "google" },
    { "name": "google.rs", "include_subdomains": true, "pins": "google" },
    { "name": "google.ru", "include_subdomains": true, "pins": "google" },
    { "name": "google.rw", "include_subdomains": true, "pins": "google" },
    { "name": "google.sc", "include_subdomains": true, "pins": "google" },
    { "name": "google.se", "include_subdomains": true, "pins": "google" },
    { "name": "google.sh", "include_subdomains": true, "pins": "google" },
    { "name": "google.si", "include_subdomains": true, "pins": "google" },
    { "name": "google.sk", "include_subdomains": true, "pins": "google" },
    { "name": "google.sm", "include_subdomains": true, "pins": "google" },
    { "name": "google.sn", "include_subdomains": true, "pins": "google" },
    { "name": "google.so", "include_subdomains": true, "pins": "google" },
    { "name": "google.st", "include_subdomains": true, "pins": "google" },
    { "name": "google.td", "include_subdomains": true, "pins": "google" },
    { "name": "google.tg", "include_subdomains": true, "pins": "google" },
    { "name": "google.tk", "include_subdomains": true, "pins": "google" },
    { "name": "google.tl", "include_subdomains": true, "pins": "google" },
    { "name": "google.tm", "include_subdomains": true, "pins": "google" },
    { "name": "google.tn", "include_subdomains": true, "pins": "google" },
    { "name": "google.to", "include_subdomains": true, "pins": "google" },
    { "name": "google.tp", "include_subdomains": true, "pins": "google" },
    { "name": "google.tt", "include_subdomains": true, "pins": "google" },
    { "name": "google.us", "include_subdomains": true, "pins": "google" },
    { "name": "google.uz", "include_subdomains": true, "pins": "google" },
    { "name": "google.vg", "include_subdomains": true, "pins": "google" },
    { "name": "google.vu", "include_subdomains": true, "pins": "google" },
    { "name": "google.ws", "include_subdomains": true, "pins": "google" },
    // Exclude the learn.doubleclick.net subdomain because it uses a different
    // CA.
    { "name": "learn.doubleclick.net", "include_subdomains": true },

    // Force HTTPS for sites that have requested it.
    { "name": "www.paypal.com", "mode": "force-https" },
    { "name": "www.elanex.biz", "mode": "force-https" },
    { "name": "jottit.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "sunshinepress.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "www.noisebridge.net", "mode": "force-https" },
    { "name": "neg9.org", "mode": "force-https" },
    { "name": "riseup.net", "include_subdomains": true, "mode": "force-https" },
    { "name": "factor.cc", "mode": "force-https" },
    { "name": "members.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "support.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "id.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "lists.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "webmail.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "roundcube.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "aladdinschools.appspot.com", "mode": "force-https" },
    { "name": "ottospora.nl", "include_subdomains": true, "mode": "force-https" },
    { "name": "www.paycheckrecords.com", "mode": "force-https" },
    { "name": "lastpass.com", "mode": "force-https" },
    { "name": "www.lastpass.com", "mode": "force-https" },
    { "name": "keyerror.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "entropia.de", "mode": "force-https" },
    { "name": "www.entropia.de", "mode": "force-https" },
    { "name": "romab.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "logentries.com", "mode": "force-https" },
    { "name": "www.logentries.com", "mode": "force-https" },
    { "name": "stripe.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "cloudsecurityalliance.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "login.sapo.pt", "include_subdomains": true, "mode": "force-https" },
    { "name": "mattmccutchen.net", "include_subdomains": true, "mode": "force-https" },
    { "name": "betnet.fr", "include_subdomains": true, "mode": "force-https" },
    { "name": "uprotect.it", "include_subdomains": true, "mode": "force-https" },
    { "name": "squareup.com", "mode": "force-https" },
    { "name": "cert.se", "include_subdomains": true, "mode": "force-https" },
    { "name": "crypto.is", "include_subdomains": true, "mode": "force-https" },
    { "name": "simon.butcher.name", "include_subdomains": true, "mode": "force-https" },
    { "name": "linx.net", "include_subdomains": true, "mode": "force-https" },
    { "name": "dropcam.com", "mode": "force-https" },
    { "name": "www.dropcam.com", "mode": "force-https" },
    { "name": "ebanking.indovinabank.com.vn", "include_subdomains": true, "mode": "force-https" },
    { "name": "epoxate.com", "mode": "force-https" },
    { "name": "torproject.org", "mode": "force-https", "pins": "tor" },
    { "name": "blog.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" },
    { "name": "check.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" },
    { "name": "www.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" },
    { "name": "dist.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" },
    { "name": "www.moneybookers.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "ledgerscope.net", "mode": "force-https" },
    { "name": "www.ledgerscope.net", "mode": "force-https" },
    { "name": "kyps.net", "mode": "force-https" },
    { "name": "www.kyps.net", "mode": "force-https" },
    { "name": "app.recurly.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "api.recurly.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "greplin.com", "mode": "force-https" },
    { "name": "www.greplin.com", "mode": "force-https" },
    { "name": "luneta.nearbuysystems.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "ubertt.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "pixi.me", "include_subdomains": true, "mode": "force-https" },
    { "name": "grepular.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "mydigipass.com", "mode": "force-https" },
    { "name": "www.mydigipass.com", "mode": "force-https" },
    { "name": "developer.mydigipass.com", "mode": "force-https" },
    { "name": "www.developer.mydigipass.com", "mode": "force-https" },
    { "name": "sandbox.mydigipass.com", "mode": "force-https" },
    { "name": "www.sandbox.mydigipass.com", "mode": "force-https" },
    { "name": "crypto.cat", "include_subdomains": true, "mode": "force-https", "pins": "cryptoCat" },
    { "name": "bigshinylock.minazo.net", "include_subdomains": true, "mode": "force-https" },
    { "name": "crate.io", "include_subdomains": true, "mode": "force-https" },
    { "name": "twitter.com", "mode": "force-https", "pins": "twitterCom" },
    { "name": "www.twitter.com", "include_subdomains": true, "mode": "force-https", "pins": "twitterCom" },
    { "name": "api.twitter.com", "include_subdomains": true, "pins": "twitterCDN" },
    { "name": "oauth.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
    { "name": "mobile.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
    { "name": "dev.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
    { "name": "business.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
    { "name": "platform.twitter.com", "include_subdomains": true, "pins": "twitterCDN" },
    { "name": "si0.twimg.com", "include_subdomains": true, "pins": "twitterCDN" },
    { "name": "twimg0-a.akamaihd.net", "include_subdomains": true, "pins": "twitterCDN" },
    { "name": "braintreegateway.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "braintreepayments.com", "mode": "force-https" },
    { "name": "www.braintreepayments.com", "mode": "force-https" },
    { "name": "emailprivacytester.com", "mode": "force-https" },
    { "name": "tor2web.org", "include_subdomains": true, "pins": "tor2web" },
    { "name": "business.medbank.com.mt", "include_subdomains": true, "mode": "force-https" },
    { "name": "arivo.com.br", "include_subdomains": true, "mode": "force-https" },
    { "name": "www.apollo-auto.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "www.cueup.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "jitsi.org", "mode": "force-https" },
    { "name": "www.jitsi.org", "mode": "force-https" },
    { "name": "download.jitsi.org", "mode": "force-https" },
    { "name": "sol.io", "include_subdomains": true, "mode": "force-https" },
    { "name": "irccloud.com", "mode": "force-https" },
    { "name": "www.irccloud.com", "mode": "force-https" },
    { "name": "alpha.irccloud.com", "mode": "force-https" },
    { "name": "passwd.io", "include_subdomains": true, "mode": "force-https" },
    { "name": "browserid.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "login.persona.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "neonisi.com", "mode": "force-https" },
    { "name": "www.neonisi.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "shops.neonisi.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "piratenlogin.de", "include_subdomains": true, "mode": "force-https" },
    { "name": "howrandom.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "intercom.io", "mode": "force-https" },
    { "name": "api.intercom.io", "mode": "force-https" },
    { "name": "www.intercom.io", "mode": "force-https" },
    { "name": "fatzebra.com.au", "include_subdomains": true, "mode": "force-https" },
    { "name": "csawctf.poly.edu", "include_subdomains": true, "mode": "force-https" },
    { "name": "makeyourlaws.org", "mode": "force-https" },
    { "name": "www.makeyourlaws.org", "mode": "force-https" },
    { "name": "iop.intuit.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "surfeasy.com", "mode": "force-https" },
    { "name": "www.surfeasy.com", "mode": "force-https" },
    { "name": "packagist.org", "mode": "force-https" },
    { "name": "lookout.com", "mode": "force-https" },
    { "name": "www.lookout.com", "mode": "force-https" },
    { "name": "mylookout.com", "mode": "force-https" },
    { "name": "www.mylookout.com", "mode": "force-https" },
    { "name": "dm.lookout.com", "mode": "force-https" },
    { "name": "dm.mylookout.com", "mode": "force-https" },
    { "name": "itriskltd.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "stocktrade.de", "include_subdomains": true, "mode": "force-https" },
    { "name": "rhcloud.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "openshift.redhat.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "therapynotes.com", "mode": "force-https" },
    { "name": "www.therapynotes.com", "mode": "force-https" },
    { "name": "wiz.biz", "include_subdomains": true, "mode": "force-https" },
    { "name": "my.onlime.ch", "include_subdomains": true, "mode": "force-https" },
    { "name": "webmail.onlime.ch", "include_subdomains": true, "mode": "force-https" },
    { "name": "crm.onlime.ch", "include_subdomains": true, "mode": "force-https" },
    { "name": "www.gov.uk", "include_subdomains": true, "mode": "force-https" },
    { "name": "silentcircle.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "silentcircle.org", "include_subdomains": true, "mode": "force-https" },
    { "name": "serverdensity.io", "include_subdomains": true, "mode": "force-https" },
    { "name": "my.alfresco.com", "include_subdomains": true, "mode": "force-https" },
    { "name": "webmail.gigahost.dk", "include_subdomains": true, "mode": "force-https" },

    // Entries that are only valid if the client supports SNI.
    { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
    { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
    { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
    { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
    { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true },
    { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
  ]
}