3.7.5 Message Processing Events and Sequencing Rules
For all operations in this section, the client MUST perform client TLS authentication [RFC2246] using the certificate in [Client State].TrustCertificate.
See corresponding section on Server Details.