TLS allows lower-level protocol records to be fragmented, but this case is not handled in the code. This happens only rarely, and then usually as a result of server misconfiguration. (For example, one recent case I observed was when the server was configured to send too many certificates.)