SNI matches certificates by looking at the SAN list on a list of certificates and finding the best match.