Is the TLS handshake performed by the Modem or the MCU?

The TLS handshake is handled by the stack in the nrf52820, not the HL7800.