fix bad offset
go fmt yourself!
if TLS-PSK don't send Certificate handshake message
if TLS-PSK don't expect Certificate handshake record (and don't try to do anything with certificates)