@SeanWrightSec Unless something's changed (it might've) that still won't cause SNI to be set correctly. IIRC without -servername SNI isn't included in the handshake at all. Testing *without* SNI is also a valid troubleshooting step at times though