I am read this article https://www.cloudflare.com/learning/ssl/what-is-sni/ and know sni send the host domain name on handshake stage. So the client could get the right certific