Hello, I'm working on analyzing TLS 1.3 traffic and I'm focusing on certificate messages. The certificate in TLS 1.3 are sent in an encrypted form and I'm extracting the length of these certificates for further analysis. I want to know If for a given server the certificate length will always be the same or no? (We don't take in consideration session resumption case)
