Could it be the reason, there is no initial TLS handshake in the trace captured to make enable Wireshark to decrypt the SSL ?