Instead of verifying the received certificate against the configured host name and validate trust it will first look at a list of server names.

If access is based entirely on self-signed certificates, deleting the public key of a certificate from the trust store revokes its access.

This is where the chain of trust and the common name on a certificate can prevent this from occurring.