Implementations support multiple trust anchors so that certificates from more than one certification authority can be accepted, support certificates up to the specified size, exchange certificates during the handshake with mutual authentication, and validate the peer's public-key certificate (chain building to a trust anchor, signature, validity period, key usage, and revocation state through CRL or OCSP with a configurable evaluation period), the first edition's 5.6.1 to 5.6.4 carried forward.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.