https://maulwuff.de/research/ssl-debugging.html#hdr1 has some good stuff, but I'm still not sure what's going on with this issue.