1<?xml version="1.0" encoding="utf-8"?>
2<network-security-config>
3    <domain-config>
4      <domain includeSubdomains="true">android.com</domain>
5      <trust-anchors>
6          <certificates src="system" />
7      </trust-anchors>
8      <!-- nested config that adds pins -->
9      <domain-config>
10          <domain>developer.android.com</domain>
11          <pin-set>
12              <pin digest="SHA-256">7HIpactkIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=</pin>
13          </pin-set>
14      </domain-config>
15    </domain-config>
16    <base-config cleartextTrafficPermitted="false">
17    </base-config>
18</network-security-config>
19