phase2_subject_match
Description:
Substring to be matched against the subject of the certificate presented by the authentication server during the inner "phase 2" authentication.
When unset, no verification of the authentication server certificate's subject is performed.