This add-on is really useful, thanks a lot.

Here I can found there are large whitelist for some domains including Amazon.
https://github.com/checkmyhttps/checkmyhttps/blob/master/server-php/www/api_whitelist.php

What's wrong with it?
Is it still in use on the production server?