Options for SSL/TLS decryption (corporate network)

[PositiveIntent]

Company performs SSL/TLS decryption for all outbound traffic. This breaks a lot of Spotify components due to certificate pinning(?). I've identified the following hostnames:
apresolve.spotify.com
login5.spotify.com
guc3-spclient.spotify.com
guc3-dealer.spotify.com
spclient.wg.spotify.com
api-partner.spotify.com
audio4-ak-spotify-com.akamaized.net
misc.spotifycdn.com
seed-mix-image.spotifycdn.com
wrapped-images.spotifycdn.com
audio4-gm-fb.spotifycdn.com
heads-fa.scdn.co
misc.scdn.co
audio4-fa.scdn.co
i.scdn.co
newjams-images.scdn.co
dailymix-images.scdn.co
charts-images.scdn.co
lineup-images.scdn.co
mosaic.scdn.co
dealer.spotify.com
Are there any more that need to be excluded from decryption?

[Ximzend]

Domains of video streams that I could find are:

video-akpcw-cdn-spotify-com.akamaized.net

video-ak.cdn.spotify.com.splitter-eip.akadns.net

video-fa.scdn.co

I've found another for the Canvas:

canvaz.scdn.co