Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0x655076925825D7B445F93070D989A34AC3B619C3805B7F165B7A80594662836B
Server: 0x01B22F27778C7E1CCC1687FA637C87F48A459F2762C75A3CFB5C99F07ABB6289
Handshake keys:
Client write: 0xFC7312A71FA85AEAEF0F49BA973BD2EB6B3904AC5047E1525FBA2BC390657E5F
Server write: 0x9C7C9E7ACCAD60FFDA556E1DB6DEA71232FE4A8863B7EAD10C759DF41946100C
Handshake IVs:
Client write (IV): 0x34C90AC41B5B4AE2D8EA6161
Server write (IV): 0x97EB630FB3B2FDC6E14F2143
(Traffic level)
Traffic secrets:
Client: 0x56586482DB2FD0F8C085EBA356D7B5DE7648556C0E0CC3284D6CDEC0E5361306
Server: 0xA85695CB620E6B0D7333AA73340C73F1EBBD251D8131552BB01899DC86F9086B
Traffic keys:
Client write: 0x0BC3FA4DDD074BAA9DA109F6413F47E21AA42A814486DE81AF0116F4C37A51FC
Server write: 0xBA3C2BFE2C15D545F28FD13A6860CF4297685550BB406643EFE0F3DFB818EC0D
Traffic base IVs:
Client write (base IV): 0x233B08804169AAAD5CAB12B9
Server write (base IV): 0x501EAC39F172CFF7BE7BC38B
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 8A:05:02:F6:5B:A8:41:9A:C7:D6:B8:B9:79:F8:47:1E:2B:AD:C9:F4:88:F8:B5:EB:9F:E7:E5:6D:DF:3A:50:13
Client SessionID: 68:A5:7A:54:8F:15:35:D9:94:A3:F2:70:0A:4C:00:86:13:89:53:83:2A:AB:B2:26:37:22:34:4C:E4:36:8C:C9
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xD350B56C56FB938954946E79979DB36A6B6FA6A67B299BAC221FAE396A472971
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 68:A5:7A:54:8F:15:35:D9:94:A3:F2:70:0A:4C:00:86:13:89:53:83:2A:AB:B2:26:37:22:34:4C:E4:36:8C:C9
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 8A:05:02:F6:5B:A8:41:9A:C7:D6:B8:B9:79:F8:47:1E:2B:AD:C9:F4:88:F8:B5:EB:9F:E7:E5:6D:DF:3A:50:13
Client SessionID: 68:A5:7A:54:8F:15:35:D9:94:A3:F2:70:0A:4C:00:86:13:89:53:83:2A:AB:B2:26:37:22:34:4C:E4:36:8C:C9
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x67FEFD307405539989D2C6FBEEC06B781D803E1CE0977D670A6B6B4DF6DBA716
y = 0x37655AD1AEADD9535B60F0E916438C2833C486D73B95664039E654360095D57B
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 68:A5:7A:54:8F:15:35:D9:94:A3:F2:70:0A:4C:00:86:13:89:53:83:2A:AB:B2:26:37:22:34:4C:E4:36:8C:C9
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 3856
[...] /skipped 3856 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 106
05:03:00:66:30:64:02:30:13:BC:CD:CD:D0:67:B6:7E:49:C2:A7:32:3B:06:78:0A:AC:10:95:AD:73:8F:C7:E4
08:8E:1B:FC:C5:C7:8F:1D:0F:97:EF:94:48:08:71:76:A4:EF:05:41:3F:09:85:3F:02:30:6A:4C:40:9E:9F:96
B8:E8:4A:19:FF:89:37:06:BB:58:39:2B:8E:4F:8F:19:49:FF:8A:9E:D9:E3:F9:90:5C:F1:13:7B:0B:8A:E5:E0
0C:92:71:1F:5D:D9:8A:D7:FB:BB
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
31:A1:58:18:00:EA:D7:42:09:C6:D1:17:72:AF:2B:61:1E:8A:3F:1F:CD:DC:33:4E:11:61:8B:69:6A:1F:5C:C4
CLIENT_FINISHED (received)
Finished value: 0xBF325A377345C06EB7C2FC7DA0A3D961F7DB16EC471C7AA1E045C351E9F5085E
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
TCP: server: 194.87.103.72:443; client: 216.73.216.84:17101; timestamp: 1765339533
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 314ms; ServerHello sent: 155ms (including HelloRetryRequest time); TLS connection established: 314ms.