safer _getSubdomain

Note that (tilePoint.x + tilePoint.y) might be negative in some cases (custom CRS with tiled WMS).