diff --git a/weed/s3api/auth_signature_v4.go b/weed/s3api/auth_signature_v4.go
index d534377a5..a0417a922 100644
--- a/weed/s3api/auth_signature_v4.go
+++ b/weed/s3api/auth_signature_v4.go
@@ -351,7 +351,7 @@ func (iam *IdentityAccessManagement) doesPresignedSignatureMatch(hashedPayload s
 	extractedSignedHeaders := make(http.Header)
 	for _, header := range signedHeaders {
 		if header == "host" {
-			extractedSignedHeaders[header] = []string{r.Host}
+			extractedSignedHeaders[header] = []string{extractHostHeader(r)}
 			continue
 		}
 		if values := r.Header[http.CanonicalHeaderKey(header)]; len(values) > 0 {