SNI (Server name indication)[1] is designed to fix this. It's a TLS extension which lets the server know the hostname that the client is expecting. It can then reply with the correct certificate.

However, I note from the Wikipedia page that XP doesn't support this (!). I had thought this a solved problem :(

[1] http://en.wikipedia.org/wiki/Server_Name_Indication