If you add a DimsAddWhitelist entry for both *.domain.com and just domain.com, only one or the other will work, but not both.