open-uri was not correctly matching hostname to alternate name for SSL