After some research it seems that as Dave said, the only solution is to set a different IP address for each certificate (what a pain). So I did that: server { listen IP1:443; ... } server { listen IP2:443; ... } But Nginx fails to start, and testing the configuration file returns a failure but no error message.