we could easily add the binding id as an SAN to the cert. But all current certs would need to be updated. I have a partially complete branch with something along those lines. It just has not been a priority