TLS extension, where a client states the hostname at the start of the handshake so that a server can present multiple certificates on the same address/port; so it can serve multiple HTTPS sites at the same IP address with different certificates
Discovered by embedding cosine similarity (sentence-transformers MiniLM, 384-dim).