Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x0018
Second ClientHello, key shares: 0x001D
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Key exchange: 0x001D (X25519)
(Handshake level)
Handshake secrets:
Client: 0x814B7C7A8FE5D2E12A99EF3C278710B3EF0FD5BFA5F69331F1215493359C445D
Server: 0x660586FBDA08998330DAAC45BB65B43067D32A5464BA68E4B334EB6BF594464E
Handshake keys:
Client write: 0x0EDEB8641FAEDA6A3B3498F1F0C8A5C3
Server write: 0x8C903FC15118FDC953D0999E0A9C58E9
Handshake IVs:
Client write (IV): 0xF5290F77976E189EC0D36638
Server write (IV): 0x08D3FF8359AC1BA985A5F57D
(Traffic level)
Traffic secrets:
Client: 0x98FF0F04016E59A81813A15FC91FD1AA506F8BFEB554DEB4B12A44F79F4153F9
Server: 0x60A1178DC0161D0F8435C4C82E4B4C87E63A63BB5952ABD6D112C0BE750263FF
Traffic keys:
Client write: 0x088DB6AB5EF65BDC3EB02731A5E08209
Server write: 0x5CB6442EF46EEB69923AB5429258DF91
Traffic base IVs:
Client write (base IV): 0xE5543CC75DC00435BF5036A9
Server write (base IV): 0x030D404C5F976729481CFA0C
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 3B:D1:C3:4D:C8:F2:5A:F8:F0:DA:1A:08:28:72:94:90:C5:FE:33:93:26:87:EB:7E:71:84:C0:BC:81:D7:6D:43
Client SessionID: 1E:B2:D9:CC:FA:11:86:C1:1C:9C:E9:8D:D9:8C:B5:0B:8D:DA:1C:13:94:E5:AA:A2:6A:DD:D3:7A:94:34:1F:BF
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x078932B3AE4A0DF68377D49892628F0A55E6C379EFEA7273F00B1C1DF2C3C9DF4788612F9068D6D8DCC18231FB658A03
y = 0x7C840DEF68FB8A2BD4A35D331C819F8ECE77D808078752273BD05D9E3E8B8D696AAE725668A283EBCE9E20718E8233FB
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 1E:B2:D9:CC:FA:11:86:C1:1C:9C:E9:8D:D9:8C:B5:0B:8D:DA:1C:13:94:E5:AA:A2:6A:DD:D3:7A:94:34:1F:BF
Extensions:
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 3B:D1:C3:4D:C8:F2:5A:F8:F0:DA:1A:08:28:72:94:90:C5:FE:33:93:26:87:EB:7E:71:84:C0:BC:81:D7:6D:43
Client SessionID: 1E:B2:D9:CC:FA:11:86:C1:1C:9C:E9:8D:D9:8C:B5:0B:8D:DA:1C:13:94:E5:AA:A2:6A:DD:D3:7A:94:34:1F:BF
Extensions:
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xB9C2139D23FB8A5D68A2D411498C86DE3FB90975602DE182835F4A9405BF6B3B
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 1E:B2:D9:CC:FA:11:86:C1:1C:9C:E9:8D:D9:8C:B5:0B:8D:DA:1C:13:94:E5:AA:A2:6A:DD:D3:7A:94:34:1F:BF
Extensions:
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x145891E6697DAA111BD9A43EB39FA860847D09303D603128F82CE7451DAE456B
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 3398
[...] /skipped 3398 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:30:5A:80:4D:B7:3C:3F:57:D5:F8:C0:9F:E2:D3:7C:6D:66:B3:9B:5F:21:2B:D9:C4:A1
42:25:C7:56:8E:31:AD:E7:10:F0:2F:69:BA:92:4F:4C:26:A6:3B:6C:63:EF:CE:89:02:31:00:91:B8:29:79:41
DE:14:3D:C9:87:60:C1:E8:D7:B3:89:C9:F4:34:A0:EC:7C:2C:32:5D:10:B5:1F:FE:4C:CA:F8:8F:EA:84:6D:23
24:40:E4:69:DB:28:C6:D4:65:67:77
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
C1:C0:42:EA:9F:D4:D4:63:C4:AD:E2:B6:E1:21:66:49:06:52:C0:25:F8:3B:E1:3C:94:1F:B5:78:B1:C9:91:A7
CLIENT_FINISHED (received)
Finished value: 0xE15D75A2FCC1029CB2E468D5D4A2C3CFF00EECC30A426F8F09E045139ED11F9B
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
TCP: server: 194.87.103.72:443; client: 216.73.216.87:28123; timestamp: 1780342672
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 294ms; ServerHello sent: 144ms (including HelloRetryRequest time); TLS connection established: 293ms.