}

  @Test
  public void testWildcardAndExclusion() {
    // *.ck is a public suffix
    assertThat(PublicSuffixPatterns.TRIE.findSuffixIndex(ImmutableList.of("foo", "ck")))
        .isEqualTo(0);
    assertThat(PublicSuffixPatterns.TRIE.findSuffixIndex(ImmutableList.of("bar", "foo", "ck")))
        .isEqualTo(1);

    // !www.ck is an exception, so ck is the suffix

IsLatest: true, Deleted: false, DataDir: "5e0153cc-621a-4267-8cb6-4919140d53b3", XLV1: false, ModTime: UTCNow(), Size: 3430, Mode: 0x0, Metadata: map[string]string{"X-Minio-Internal-Server-Side-Encryption-Iv": "jIJPsrkkVYYMvc7edBrNl+7zcM7+ZwXqMb/YAjBO/ck=", "X-Minio-Internal-Server-Side-Encryption-S3-Kms-Key-Id": "my-minio-key", "X-Minio-Internal-Server-Side-Encryption-S3-Kms-Sealed-Key": "IAAfAP2p7ZLv3UpLwBnsKkF2mtWba0qoY42tymK0szRgGvAxBNcXyHXYooe9dQpeeEJWgKUa/8R61oCy1mFwIg==", "X-Minio-Internal-S...

      // Excluded match (!rule). If this bit is set, it means the current path is NOT a public
      // suffix, even if a previous rule matched. For example, "!www.ck" would exclude "www.ck"
      // from being a public suffix, leaving "ck" as the suffix.
      if (isExcludedMatch(metadata)) {
        bestResult = i + 1;
      }

      // Exact match. If the exact type bits are set, this node itself is a public suffix.

    // TLD with a wildcard rule and exceptions.
    checkPublicSuffix("ck", null)
    checkPublicSuffix("test.ck", null)
    checkPublicSuffix("b.test.ck", "b.test.ck")
    checkPublicSuffix("a.b.test.ck", "b.test.ck")
    checkPublicSuffix("www.ck", "www.ck")
    checkPublicSuffix("www.www.ck", "www.ck")
    // US K12.
    checkPublicSuffix("us", null)
    checkPublicSuffix("test.us", "test.us")