code: func (pa *AuthorityImpl) checkWildcardHostList(domain string) error {
  	pa.blocklistMu.RLock()
  	defer pa.blocklistMu.RUnlock()
  
  	if pa.blocklist == nil {
  		return fmt.Errorf("Hostname policy not yet loaded.")
  	}
  
  	if pa.wildcardExactBlocklist[domain] {
  		return errPolicyForbidden
  	}
  
  	return nil
  }
docs: // checkWildcardHostList checks the wildcardExactBlocklist for a given domain.
  // If the domain is not present on the list nil is returned, otherwise
  // errPolicyForbidden is returned.