> connecting s_client to s_server with TLS 1.3 seems to cause two successive session tickets to be sent by the server (see below). > Is this expected? Yes.