X.509 Logon through Web Dispatcher

Dear colleagues,

I tried to configure X.509-Based Logon to Java AS through Web Dispatcher.

Source system received error "Not authorized". In dev_webdisp I found:

[Thr 140556505413376] Fri Dec 25 10:59:33 2015

[Thr 140556505413376]   SSL NI-hdl 112: local=<ip_webdisp>:12290  peer=<ip_target_Java_AS>:50001

[Thr 140556505413376] <<- ERROR: SapSSLSessionStart(sssl_hdl=0x7fd5d81ec750)==SSSLERR_SERVER_CERT_MISMATCH

in Web Dispatcher profile added:

icm/HTTPS/forward_ccert_as_header = true

wdisp/ssl_encrypt=1

wdisp/ssl_auth=2

wdisp/ssl_cred=$(SECUDIR)/SAPSSLC.pse

wdisp/ssl_ignore_host_mismatch=1

icm/HTTPS/trust_client_with_issuer = *

icm/HTTPS/trust_client_with_subject = *

Could you please help me  to resolve this issue?

Thanks a lot,

Alexander