Singlebox 3.2.0.222 : X509 authentication?

Hi
Is X509 authentication supposed to work in build 222 of singlebox ?
In my setup, the browser prompts me for my PIN code, but I do not see the LDAP query for a matching sasAllowableSubjectNames attribute.
I use an "external" LDAP store (eDir) with all tracing enabled.
I have the following settings:
- the box next to "Disable Root CA revocation check" checked
- certificate attribute matching set to: Subject Name <-> sasAllowableSubjectNames
- "Auto Provision X509" checked

After the browser has prompted me for the PIN code, it falls back to form based authentication. I assume that is because of the "Auto Provision X509"

any advise is very welcome
tnx,
chris