Refactored the tls_model attribute to use a custom subset subject. No functional change intended.