To be fair, that's the "connected edition" variant of Java Card 3 – to my knowledge, nobody actually uses that.

But even the "classic edition" usually supports regular secure channel communication. It's not TLS, but it achieves the same outcome (i.e. secure remote card access by a remote conceptual terminal).