[LukeShu]

Beyond just the cert itself, the client will typically announce in plaintext the hostname it is seeking to talk to, as part of SNI.