The header must contain the `includeSubDomains` directive. The header must contain the `preload` directive.