Encode the right subject name
    
    When encoding an issuer-and-subject, use the subject from the client
    certificate, and if we don't have an issuer for the encryption
    certificate, assume that the encryption certificate is its own issuer.