An RFC 8461 compliant MTA-STS subdomain