Interesting. Certificates with multiple host names are often seen on shared hosting where unrelated customers share the same server. So this seems helpful in the Facebook example, but I don't think it's a safe rule to apply in general.

Good point, certainly this could be much tidier, I understand what's going on but I don't know that my mother would understand. However she also wouldn't understand why Tor is a good idea so...