As a bonus, the "npn-boot" jar to extend the Java SSL implementation with the necessary next_protocol_negotiation extension support also allows access to the server_name extension. This should mean that you could implement server SNI support in Java, which allows SSL virtual hosting for supported clients.