Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0x4A79923D9EFC513D581886A7A92F82505F58326F809568F79D02619757606EB6
Server: 0x749F728A57F6E1D14612E59A353D3AE1C6D9C4D539FCD305E163B93673ACCF2E
Handshake keys:
Client write: 0xA18B581D4C5C54AD3ED944496CBCB8EB
Server write: 0x625CCDDABE4E4E47D0E407DDAA07F0FE
Handshake IVs:
Client write (IV): 0xF96C8AC4DABA6507529228D9
Server write (IV): 0xC8A867743718216DEF6BE696
(Traffic level)
Traffic secrets:
Client: 0xFAC02FB5823687D9DBAB503A16D92AD90BB11ABAF2590FF4E9B72AD9F388CF9F
Server: 0x8191A4EB94ECB0DEE36CBC1CC858D6EEBD264FE725E18E73493AB9F5072508DA
KeyUpdates log, server:
0: 0xA7305B0FE8904FA35567E581662B57B7720016D317B5594DC7FF5CB69EEDC78F
Traffic keys:
Client write: 0xF5F0CE9FE1069A6323C48A390B02412E
Server write: 0x69ED09F3EC7EA7AB8EAF0BAEDD1C22B9
KeyUpdates log, server:
0: 0x4AB97C7B3FAC0174224A7CB03CC07E7F
Traffic base IVs:
Client write (base IV): 0xC80696B88E2ECC453D8771D2
Server write (base IV): 0xB96A0795EDA1BD2764E21B60
KeyUpdates log, server:
0: 0x18BE80CFD8D3EED40343BB22
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 8C:20:A8:FF:11:C2:AD:CE:F2:79:81:24:C9:D8:81:F5:30:99:2C:6C:A0:16:BB:0F:72:F1:02:67:6A:46:8B:BD
Client SessionID: 22:87:5F:80:A2:2A:FF:89:44:26:A0:16:7B:7A:42:F4:1A:9F:AF:6C:F5:20:35:05:94:C0:AE:A4:55:F2:59:8D
Extensions:
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xF314ED3D0972E6FA47FA90B943332DEE7144C5C750D7C0AB08B6FDAE2E39AE06
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 23 (0x0017); /non-TLS-1.3/
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 22:87:5F:80:A2:2A:FF:89:44:26:A0:16:7B:7A:42:F4:1A:9F:AF:6C:F5:20:35:05:94:C0:AE:A4:55:F2:59:8D
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 8C:20:A8:FF:11:C2:AD:CE:F2:79:81:24:C9:D8:81:F5:30:99:2C:6C:A0:16:BB:0F:72:F1:02:67:6A:46:8B:BD
Client SessionID: 22:87:5F:80:A2:2A:FF:89:44:26:A0:16:7B:7A:42:F4:1A:9F:AF:6C:F5:20:35:05:94:C0:AE:A4:55:F2:59:8D
Extensions:
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x53E8FDA54506089ADD8621F489474C8455E7C895BAD4699D0441ED0B8ADA65D6
y = 0x53411290A62C15BE68307987719C04EA257DBFF0BDB2F488C5CED71B42562BF8
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 23 (0x0017); /non-TLS-1.3/
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 22:87:5F:80:A2:2A:FF:89:44:26:A0:16:7B:7A:42:F4:1A:9F:AF:6C:F5:20:35:05:94:C0:AE:A4:55:F2:59:8D
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2699
[...] /skipped 2699 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:30:53:D5:4D:37:1C:B5:CD:2A:4A:A4:B7:3C:51:27:F6:E2:A2:98:51:FD:D0:9D:03:4D
4A:AD:21:3D:8C:19:F6:01:F9:02:7B:C5:FB:34:03:96:97:D0:22:77:8D:59:54:FB:02:31:00:F5:1F:CE:10:06
6C:D9:71:1F:CF:60:B4:06:E8:61:71:E3:8B:2A:CB:72:6B:CB:FE:D3:6B:5D:BD:3A:35:8F:ED:D0:3B:6C:43:69
0F:F0:1E:88:07:9D:58:A7:C6:0D:F9
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
59:66:56:1C:AE:C3:ED:37:E9:CC:05:D0:4D:F7:20:DA:AB:64:39:21:DD:9B:B5:47:C9:7D:9E:F6:E9:19:AC:9D
CLIENT_FINISHED (received)
Finished value: 0xA603EE8B1E2B415E629A13471AD65CE7958FA85251EBAE8181F67B80702BF164
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.111:7063; timestamp: 1789127475
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 291ms; ServerHello sent: 146ms (including HelloRetryRequest time); TLS connection established: 290ms.