"hostname in certificate didn't match:
so I googled and here is the answer:
http://forum.springsource.org/showthread.php?114685-Samples-OpenId-Google-Login-Hostname-in-Certificate-didn-t-match
basically do not use httpclient:4.1.2 for this kind of operations