Which message in the TLS 1.3 handshake proves that the server actually possesses the private key associated with its certificate?