And even if your client software doesn't use SNI... the server has to send you the cert before an authenticated encrypted channel can be established, so the cer

And even if your client software doesn't use SNI... the server has to send you the cert before an authenticated encrypted channel can be established, so the cert's snoopable - and has the domain name in it.