fixes #2809 - send host subject as xpi opt to prevent ssl connect errors