I don't think so, which is quite disappointing. Any basic reverse proxy
can do this:1. One public IP with many FQDN, with each their own
certificate →2. Use SNI to send the correct certificate to the client.
(Fortigate can do this, with cert replace)...