[kuschku]

That wouldn't avoid the issue, actually — I need to put a dozen domains in the same IP space with one cert to get this security property.

Otherwise an adversary could simply see what IPs you connect to and reverse DNS them.