"You should also allow connections to the digicert.com domain, as Windows API may need to verify F-Secure services that are signed with a certificate that is issued by Digicert. "
So provided the correct syntax, now you need to add 2 more URL in web exceptions and disable HTTPS Inspection on that requests.
You can also create a Firewall rule for http/s traffic to *.f-secure.com and *.fsapi.com. You can create FQDN Hosts with exactly that Hostname (so use a * before the dot). XG supports it.
Quote