Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0x5389AE01E62067DC6015D03FD2AA2E4AA03DB4C16374DF5593A988B29BFCFE8215A1C99CB34C3717C088F4501909F75F
Server: 0x5DD6350F860427DCBC12F8C16277D5142C91563687FE0974B5DBC4EDBC634F02E96C9FFBF3F3A2FFF109BF2ADA28BD52
Handshake keys:
Client write: 0xE91A469F03BE8C845B64EC4798163DE25CE30045576BF9989D876DEB10380128
Server write: 0x1B365BC4C4F70507326992BD74A7F99DD1B92AF30E7FE6C3CDC3BC9352CD82D6
Handshake IVs:
Client write (IV): 0x9D9A4BA6B4D60150267E367C
Server write (IV): 0x15C90CC81605B46585488495
(Traffic level)
Traffic secrets:
Client: 0xF304DEF9DBFEAF4DE9C2AE32F55F8CFD4359A93C1962A7B5EA5A822733C56F3E8AB406760F9B04021140977EFC654063
Server: 0xE9F92989F546E8A1FFC503DB52E397DB70BBAE248DD5066AE49EA37D01E4E7BBFBFBD43AE06966368BF286EE4667FB4C
KeyUpdates log, server:
0: 0x58E44C30F92D1A982493598CA3F29A745E3358E08C6D80D19D1454F4439F7F6839294AB98C8825223A826C859FF03277
Traffic keys:
Client write: 0x861309423B68A16C8801D303FB26A56345B0E4D6D020D069D7F6AFCB9920A03F
Server write: 0xE63E67CB0319AF17FF7D88F0229DC8D9AD4B5D23C475B86EDCC691FD10016640
KeyUpdates log, server:
0: 0x0A62DCD5BFCE63943C5D9777F09F143D0306D618292BCA5BD9E9D4D14C92A814
Traffic base IVs:
Client write (base IV): 0x17B17002EE0FE7C8A417B155
Server write (base IV): 0x325AF3CB9EAD2E20C98D7114
KeyUpdates log, server:
0: 0x9B28D5A069169A787FB6D423
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: F7:0B:FE:FE:83:85:F6:6B:3E:EC:05:C1:46:1B:E0:6E:DC:4E:BE:45:3D:F4:F5:EE:AA:99:49:7F:BC:84:89:02
Client SessionID: 6B:EC:EA:FE:C8:C6:64:2F:23:76:84:0E:3D:A9:39:0B:47:C0:BC:FD:6A:64:45:CD:36:DB:C3:BC:4F:E1:58:91
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x7FA63A0B8AE704C68762FAD00DB7D5984BEE21022271FBAC758D515DB9E32944
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 6B:EC:EA:FE:C8:C6:64:2F:23:76:84:0E:3D:A9:39:0B:47:C0:BC:FD:6A:64:45:CD:36:DB:C3:BC:4F:E1:58:91
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: F7:0B:FE:FE:83:85:F6:6B:3E:EC:05:C1:46:1B:E0:6E:DC:4E:BE:45:3D:F4:F5:EE:AA:99:49:7F:BC:84:89:02
Client SessionID: 6B:EC:EA:FE:C8:C6:64:2F:23:76:84:0E:3D:A9:39:0B:47:C0:BC:FD:6A:64:45:CD:36:DB:C3:BC:4F:E1:58:91
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x07D71D370FE92BFAD28F5420C31EB3FCAAE994D2E0907DD797E066EDDA294568
y = 0x3D0695D0B4F7D229F330154061A8835CCF05A6B50DDA310261F66741A9980A4E
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 6B:EC:EA:FE:C8:C6:64:2F:23:76:84:0E:3D:A9:39:0B:47:C0:BC:FD:6A:64:45:CD:36:DB:C3:BC:4F:E1:58:91
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2700
[...] /skipped 2700 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:31:00:AE:33:AB:32:A1:A5:36:D6:62:5D:FA:F9:DF:35:20:1E:C0:9D:47:B0:63:FF:07
25:BF:8C:19:A2:9E:88:F8:1D:31:47:26:E0:2D:17:F3:8C:FF:2E:CC:E4:8B:0F:2C:E5:02:30:60:33:73:9D:82
00:A2:59:A5:CF:1B:99:F8:E9:8B:FB:70:18:E9:21:00:8C:FF:A3:3E:AA:CD:43:C2:85:82:88:54:B0:CF:F7:13
47:6D:E7:F0:8A:81:F2:53:E5:E7:EE
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
2C:C3:EC:F4:7A:DB:CA:9D:B2:00:55:8E:2E:84:A4:0B:C7:D0:B9:ED:23:67:16:FB:31:CC:25:50:A4:91:45:D1
96:A9:88:35:13:A4:78:9D:D5:B8:1B:75:FD:52:AD:CA
CLIENT_FINISHED (received)
Finished value: 0xF04298CFB62813524874D048659714BB26D34979C8E2E199E86B96C40E9135A142F9F51AD721128AC0DB3B94A3F55993
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.217.105:42511; timestamp: 1793738920
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 319ms; ServerHello sent: 143ms (including HelloRetryRequest time); TLS connection established: 319ms.