Sophos Doc needs to be made clearer

https://docs.sophos.com/central/Customer/help/en-us/central/Customer/concepts/DomainsPorts.html

The above URL lists the Domains and Ports required for customer to enter to ensure smooth comms to Sophos etc.

In one part of the section it lists:

• central.sophos.com
• cloud-assets.sophos.com
• sophos.com
• downloads.sophos.com
• az416426.vo.msecnd.net
• dc.services.visualstudio.com
• *.cloudfront.net

Then is lists one can use a wildcard if supported. {*} which is understood. 

Then it says if you don't use wild cards you have to enter specific entries such as:

• crl.globalsign.net
• ocsp.digicert.com
• crl3.digicert.com
• crl4.digicert.com

HOWEVER, the wildcard would not have captured these entries and I don't want to wildcard whole domains outside of Sophos.

I think this document could be made clearer please.

Thanks