Can I sampe data in ACL and use it - in an Action?

Yes, ssl_fc_sni is a sample fetch, that’s means you can use it, in ACL’s and elsewhere.

You most likely DON’T WANT to use it, because you should look at the Host header instead in almost every single case; but that’s another story: