...
You need to support more than one Active Directory domain, but the domains are not in a trust relationship
You need to support more than one hostname / SPN (some clients like for instance Git clients do not canonicalize CNAMES)
You want to support more than one encryption type
...