The server has a certificate and the client does not have a certificate.

The server has a certificate and the client does not have a certificate.

Preparation:
1. Negotiate an asymmetric encryptionAlgorithm. (Both parties should implement this algorithm)
2. Negotiate a symmetric encryption algorithm. (Both parties should implement this algorithm)

Start:
3. The client obtains the public key of the server certificate.
4. The client generates a random password. (Symmetric encryption) (key 1 !!!)
5. The client encrypts the random password with the public key of the server and sends it to the server. The server uses its own private key for decryption. (Key 2 !!!)

6. Both parties start to use symmetric encryption algorithms and use temporary passwords to decrypt messages.