Handle sh_cert_shd bundled into 1 tls record