According to Wikipedia, in the following cipher suite:
The RSA part denotes the "authentication mechanism during the handshake".
And I'm confused, since from what I know it works like this: The server sends a certificate (let it be a X509 certificate) to the client. Now the client needs to do 2 things: A. he needs to verify the signature of the certificate, given the name of the CA. B. He needs to verify that the private key that corresponds to the subject's public key indeed is held by the subject.
In order to do the first, the certificate contains the "Certificate Signature Algorithm" so the client knows what algorithm is used to verify the signature.
In order to do the second, the client needs to encrypt something with the subject's public key. For this, it needs to know what algorithm should be used to encrypt with. For that, the certificate contains a section of "Subject Public key Information", which in turn includes "Subject Public Key" and "Public Key Algorithm".
So what I don't understand is, why is this part of the cipher suite? and, must the server pick a suite with the Authentication algorithm corresponding to the one of the certificate?