nmap -p 443 --script ssl-cert-intaddr.nse example.com
Starting Nmap 7.30 ( https://nmap.org ) at 2016-09-30 05:14 EDT
Nmap scan report for 
Host is up (0.067s latency).
PORT    STATE SERVICE
443/tcp open  https
| ssl-cert-intaddr: 
|   X509v3 Subject Alternative Name: 
|_    10.12.58.1
Nmap done: 1 IP address (1 host up) scanned in 0.56 seconds

nmap --p 443 --script ssl-cert-intaddr.nse 10.121.22.89
Starting Nmap 7.30 ( https://nmap.org ) at 2016-09-30 05:16 EDT
Nmap scan report for 10.121.22.89
Host is up (0.000087s latency).
PORT    STATE SERVICE
443/tcp open  https
| ssl-cert-intaddr: 
|   Issuer emailAddress: 
|     10.6.6.6
|   Subject commonName: 
|     10.5.5.5
|   Subject organizationalUnitName: 
|     10.4.4.4
|   Issuer organizationName: 
|     10.0.2.1
|     10.0.2.2
...