Document what SNI-base HTTPS is

[indexzero]

It doesn't work on some common versions of OpenSSL so curl https://sub.jit.su will return false positives since our load balancers use SNI-based HTTPS.

[indexzero]

See: http://stackoverflow.com/questions/12941703/use-curl-with-sni-server-name-indication