Figure 25 - Server Certificate Verification
Here the client needs to verify the server is really who they say they are. There are a lot of checks against the certificate. If any of these checks fail, there is a good chance the client is not talking to the “real” server.
Assuming that everything is fine, the client still has more work to do. It needs to come up with some keying material.
23
