Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x0018
Second ClientHello, key shares: 0x001D
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Key exchange: 0x001D (X25519)
(Handshake level)
Handshake secrets:
Client: 0x4E494C280D4B2186F4A2B51479F75B29A409055B01A6044D4EBC31D5866F4E52
Server: 0x4A7B0B776667908F0CEC18B4EF69EE6C77B1C14BE2950C300615A33C5B13E1C5
Handshake keys:
Client write: 0x84F1D8B94953E086E1C961A0EF2DCD9F
Server write: 0x8A6E756C750F13DF6BD7FC40316D948D
Handshake IVs:
Client write (IV): 0x296DFEA1B5800668FB6C5D84
Server write (IV): 0x1BB3174E35618186E6F3B5A6
(Traffic level)
Traffic secrets:
Client: 0x3A10865D1E2307366B43BE28E19DC16603E2904D11192D6B7AD2B1C0CA01EA8F
Server: 0x56147B37CAB09862A63A42961CCCCD56568DB26EBEA088B328ED720A4956CC96
KeyUpdates log, server:
0: 0x0F0B958627C42E57D63EF5812039A7508D864C9B2BA102E4CA2506A86D98A424
Traffic keys:
Client write: 0x7F1A9669FAD70C4F39C15069E6DE5A44
Server write: 0x8FBA30822E1FBA6F1CE4C6A24D460B08
KeyUpdates log, server:
0: 0x5875973A304CEE44B96B652BC05CF2B7
Traffic base IVs:
Client write (base IV): 0x5A64B65AF10E72039C743DD8
Server write (base IV): 0x4D363DEA7D14AAF58795B7CF
KeyUpdates log, server:
0: 0xEAF0E75CC5D2325DC162BBD4
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 90:70:DD:68:FD:47:EC:D3:7B:E4:6F:14:35:B6:1B:34:64:D4:88:58:A7:09:38:43:2D:E3:67:6D:72:59:87:15
Client SessionID: 38:DC:C0:5D:6B:D7:11:FF:06:46:84:50:23:96:50:C0:BD:FE:90:A1:E2:2E:BD:7B:61:7F:18:B4:33:4E:38:7E
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x0458FECB12525F28C971292424EFC8994C4334BEFFFFB6CB4CDF5345E0302C7E635F173841C18FB8EF764C58F3544D9B
y = 0x8C424FF58333356B45A7FD63EC0C755711353251FD40259F129A36FCEA88179C579BDA392F3CDF2B6BD7E039CCD7D323
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 23 (0x0017); /non-TLS-1.3/
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 38:DC:C0:5D:6B:D7:11:FF:06:46:84:50:23:96:50:C0:BD:FE:90:A1:E2:2E:BD:7B:61:7F:18:B4:33:4E:38:7E
Extensions:
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 90:70:DD:68:FD:47:EC:D3:7B:E4:6F:14:35:B6:1B:34:64:D4:88:58:A7:09:38:43:2D:E3:67:6D:72:59:87:15
Client SessionID: 38:DC:C0:5D:6B:D7:11:FF:06:46:84:50:23:96:50:C0:BD:FE:90:A1:E2:2E:BD:7B:61:7F:18:B4:33:4E:38:7E
Extensions:
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x28698E41F696DD1C12C6586620CA130D95C3D39CB7AEFC2D8BBA22439DC3A851
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 23 (0x0017); /non-TLS-1.3/
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 38:DC:C0:5D:6B:D7:11:FF:06:46:84:50:23:96:50:C0:BD:FE:90:A1:E2:2E:BD:7B:61:7F:18:B4:33:4E:38:7E
Extensions:
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x145891E6697DAA111BD9A43EB39FA860847D09303D603128F82CE7451DAE456B
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2696
[...] /skipped 2696 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 106
05:03:00:66:30:64:02:30:24:57:17:0E:55:E5:98:DF:6A:0B:92:0B:DA:8E:87:B4:E9:59:9C:14:D3:78:41:BB
1E:F5:01:BE:A2:02:AE:5C:FD:30:E0:5A:04:8D:70:A1:F9:3F:2C:7E:6D:B5:09:16:02:30:7D:7A:79:DF:AA:54
6E:C2:6C:AF:D3:8E:8B:6D:4F:EF:30:82:5B:B2:A2:A8:8F:24:07:A0:15:68:31:2F:F7:C3:7F:2A:C6:C2:41:07
21:67:A9:0E:42:48:8E:CC:92:33
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
55:2B:CC:2E:A8:8B:A3:6F:5C:A0:28:54:F9:A5:3F:20:68:2C:A3:D6:29:CC:DF:82:8B:9E:A6:D3:33:74:F9:61
CLIENT_FINISHED (received)
Finished value: 0x05B2F8542465160BC08015F953A5EB84C396EDCE034474D6538BECA17C57CB81
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.164:13846; timestamp: 1792282389
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 271ms; ServerHello sent: 138ms (including HelloRetryRequest time); TLS connection established: 270ms.