I had exactly same problem and on internet was no solution, but after 2 days I finally find solution with HAProxy (maybe it can help someone).
Traffic -> myfakehost.com (listenning TLS1.0) -> myhost.com (listenning TLS1.2).
bind *:443 ssl crt /etc/haproxy/mycertificate.pem force-tlsv10
http-request set-header Host myhost.com
server mymaps myhost.com:443 ssl check verify none
As you can see I had few problems with certificates and I need use
set-header option to change original URL to new URL.
mycertificate.pem need to have in my case (private key, server certificate, intermediate certificate, root certificate) and
myfakehost.com is alias for
curl -v https://myfakehost.com
openssl s_client -showcerts -connect myfakehost.com:443