This is a general SSL Error indicates an issue with the certificate might be due to the use of a self-signed certificate that it's not installed in the local certificate trusted store, or due to FQDN mismatch with the certificate Common Name ..etc..
When you specify a domain name in dynamic-split-exclude-domains Like youtube.com the ASA will include all its Sub-Domains (xxx.youtube.com). it's like using a wildcard (*) but you can configure it with "*", and if you configured it on debugs you wil...