Hi folks 👋
I believe the recent change to https://github.com/apache/httpcomponents-client/pull/198 broke validation for private domains. The domain type is now forced to ICANN. In my scenario this causes a valid cert check for foo.bar to fail because bar is not part of the PublicSuffixMatcher rules forcing the getDomainRoot to return a null object and thus failing validation in the matchDomainRoot method.