I noticed this yesterday. Browsing senate.gov and associated domains with https everywhere shows a lot of broken pages. It's fun to peek around on
https://republicans.senate.gov and
https://democrat.senate.gov because they appear to be test versions of those pages. You can see a list of domains the wildcard does cover by looking at the error the browser provides and what not. Someone should probably fix this mess over there...