Make sure you carefully define what domains and sub-domains are used to serve content on your site. The increasingly common use of content delivery networks (CDNs) requires sites to incorporate content served by a third-party. "Unclaimed" CDN buckets can be used to serve malicious content under your certificate.