An example for anyone who hasn't seen this before:

https://subdomain.preloaded-hsts.badssl.com/