Detect when hosts reject the backend's certificate

[a-gerhard]

Instead of host unreachable error, in this case, the error message and the corresponding host problem message should state that the host is reachable (TCP handshake is OK), but the ssl certificate is rejected.