Test, validate and match regular expressions
Matches HTTP Public Key Pinning (HPKP) header values that contain at least one max-age or pin-sha256 directive followed by the includeSubDomains flag. It captures directives like 'max-age=31536000' and 'pin-sha256="base64value"' separated by semicolons with optional whitespace. Useful for security auditing tools that validate or extract HPKP security headers from HTTP responses, ensuring the includeSubDomains option is present.