test secret domain leak from SSL certificate