 | 1 | initial version |
A "Certificate Request" from the server should appear between the "Server Hello" and "Server Hello Done" messages and can be located using a display filter of tls.handshake.type == 13.
The handshake type 11 is for an actual certificate that is being transmitted in either direction and should be present for the server certificate and if the client sends a certificate.
If you don't see the certificate request then the server (or possibly an intervening proxy) isn't requesting a client certificate.
