To answer that question: https://megous.com/dl/tmp/5a6729bcaa62d382.png https://megous.com/dl/tmp/5a6729bcaa62d382.png From wireshark capture of `openssl s_cli

To answer that question: https://megous.com/dl/tmp/5a6729bcaa62d382.png https://megous.com/dl/tmp/5a6729bcaa62d382.png From wireshark capture of `openssl s_client localhost:443` 2kb can add up if done often enough. And this is a fairly ideal case. I just have two simple certs using secp384r1. If certificate chain is longer and when the certs use RSA, it will consume more bandwidth.