Change the HSTS preload entry for carbonmade.com to include_subdomains: false.

net/http/transport_security_state_static.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file contains the HSTS preloaded list in a machine readable format.
 
 // The top-level element is a dictionary with two keys: "pinsets" maps details
 // of certificate pinning to a name and "entries" contains the HSTS details for
 // each host.
 //
@@ skipping 2417 matching lines @@
     { "name": "blablacar.in", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.it", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.mx", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.nl", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.pl", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.pt", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.ro", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.rs", "include_subdomains": true, "mode": "force-https" },
     { "name": "blablacar.ru", "include_subdomains": true, "mode": "force-https" },
     { "name": "canhazip.com", "include_subdomains": true, "mode": "force-https" },
-    { "name": "carbonmade.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "carbonmade.com", "include_subdomains": false, "mode": "force-https" },
     { "name": "collinmbarrett.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "coloradocomputernetworking.net", "include_subdomains": true, "mode": "force-https" },
     { "name": "copperhead.co", "include_subdomains": true, "mode": "force-https" },
     { "name": "covoiturage.fr", "include_subdomains": true, "mode": "force-https" },
     { "name": "csacongress.org", "include_subdomains": true, "mode": "force-https" },
     { "name": "czakey.net", "include_subdomains": true, "mode": "force-https" },
     { "name": "czk.mk", "include_subdomains": true, "mode": "force-https" },
     { "name": "dpsg-roden.de", "include_subdomains": true, "mode": "force-https" },
     { "name": "ducohosting.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "eatsleeprepeat.net", "include_subdomains": true, "mode": "force-https" },
@@ skipping 1210 matching lines @@
     "SPIDEROAK_COM",
     "BLOGGER_COM",
     "CHROME_COM",
     "GVT3_COM",
     "GVT2_COM",
     "GOOGLE",
     "GGPHT_COM",
     "BLOGSPOT_COM"
   ]
 }