A lot, but note that this is only the record layer, after the most error-prone parts kuike the negotiation, certificate parsing, etc are done.

(Sadly there is a X.509 parser, used for other purpouses, in the kernel.. http://cateee.net/lkddb/web-lkddb/X509_CERTIFICATE_PARSER.ht...)