IEC 62351 - Power Systems Communication Security 3:7.5: Part 3, 7.5: TLSv1.2 extensions (renegotiation indication, trusted CA, signature algorithms, OCSP stapling, server name indication, encrypt-then-MAC)

Conforming TLSv1.2 implementations support the extensions the profile selects: renegotiation indication (RFC 5746), signalling of client-supported CA certificates through the Trusted CA extension, signalling of supported signature algorithms, stapling of OCSP responses so that revocation state travels with the certificate to devices that cannot reach an OCSP responder, server name indication of the intended target server, and encryption before authentication (encrypt-then-MAC).