I think the problem is that you'd need a different X.509 certificate for TLS, for each and every single IP.