- fix incorrect alert type being sent - error out when we receive a CCS before a CH - error out when we receive an encrypted CCS