diff --git a/security/manager/tools/PreloadedHPKPins.json b/security/manager/tools/PreloadedHPKPins.json
index 729059ee754..cf1703d9326 100644
--- a/security/manager/tools/PreloadedHPKPins.json
+++ b/security/manager/tools/PreloadedHPKPins.json
@@ -40,8 +40,9 @@
       "facebook"
     ],
     "production_domains": [
-      // Chrome's test domain.
+      // Chrome's test domains.
       "pinningtest.appspot.com",
+      "pinning-test.badssl.com",
       // Dropbox
       "dropbox.com",
       "www.dropbox.com",