This is my oneway setup currently for all subdomains: https://www.ssllabs.com/ssltest/analyze.html?d=test.lucacastelnuovo.nl