fixed crt.sh parsing issue, -subs-only quirk and added support for riskiq

[cybercdh]

Fix parsing of return values from crt.sh
Sometimes the results from crt.sh will produce multiple results in the name_value field, separated by a newline character. The whole returned string which may include multiple subdomains is treated as one subdomain and then passed to cleanDomain which removes any erroneous prefixes.

However, consider searching for subdomains of yhs.search.yahoo.com and this will yield, as an example,
*.qa-release.yhs.search.yahoo.com\n*.qa-trunk.yhs.search.yahoo.com which is of course two subdomains.

Assetfinder will then output

qa-release.yhs.search.yahoo.com
*.qa-trunk.yhs.search.yahoo.com

thereby giving the appearance that *.qa-trunk.yhs.search.yahoo.com hasn't been passed through cleanDomain.

I've updated the crtsh.go file to parse this field more effectively which ensures a "clean" output.

-subs-only flag still producing non-subdomain results

I found that by moving the following substring comparison

if subsOnly && !strings.HasSuffix(res.n, res.domain) {
	continue
}

outside of the main goroutine and into the for loop over the out range removed any erroneous results.