Just tested. SNI is default on w/ Apache 2.4. And if you access the HTTPS by IP the default will be used to handshake, in my case it's the certs in 000-default.conf. I guess that's why inside sites-enabled there is a prefix [000..]- for each conf to ensure load order.