Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0xB6A937E0A21FC8910A196C2BCD5D6B4CCC5E399062637BD14940E5A361BA24AF0D6DB510E2FB7EC4DB128245AB61DDDB
Server: 0xD9142F7A22CE57298AB1989E1AE665D4E743941CC3BE592DDC48BFA14D4C1DED6CDE97EE2DC561408781207A595DDE58
Handshake keys:
Client write: 0x689FCABF7BDD8B40FB0A778FA5A294145309F3851E5FD3A3C65D0A693D7E6939
Server write: 0xB0FED769A9090FE3578D51FA1469B2AAFC5C1FB5F25588F2D7E94EBF189C5458
Handshake IVs:
Client write (IV): 0xA47790EA370D567172EF0A24
Server write (IV): 0xDBA0F58B88A596E70FFB6B22
(Traffic level)
Traffic secrets:
Client: 0x99F7A6C51757FBF5BFD761A21D354F38C76722D0BB8D70055B27F97F59BB514E4A5E51EAB2F65637BA2007103D28E075
Server: 0x87690676923D3C2994DC85B481ECA19168991909DE79D952C8383788C6A4E5D8060C89394DA3DAD1890E6561B8A400AC
KeyUpdates log, server:
0: 0x02169D748E2ADCB568E23B2B71A78749BD814DE8F541810EDE86059E769BFDBFB803BFD9AE943EFBE12F493E0D924448
Traffic keys:
Client write: 0x34E218A0655F368F97FD21265BC4C635401F35EC7F25D06AEB87B0B3C4288515
Server write: 0xE2E75E983025146F2BC4FDC5377603ED92A7055839AAA8DF20339B89E4995B5B
KeyUpdates log, server:
0: 0x711F96C0CD4350BCD9E9AD90D67A59BD70BD1568769B94BE1CEDFDD45C3388E2
Traffic base IVs:
Client write (base IV): 0x04916FC9879E1299BC4DD3AF
Server write (base IV): 0x283A5ADC1AE846C517F7D7D4
KeyUpdates log, server:
0: 0x639E3E965501C49A742DB091
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 72:BB:89:50:04:D5:07:2A:95:FB:7B:71:12:6A:BB:0A:66:0E:D0:8E:02:6C:75:2F:97:EF:BC:C3:15:C3:18:44
Client SessionID: 35:DC:3E:6F:AC:59:0F:AC:A1:C3:31:7A:EF:BA:1C:41:D5:07:71:69:89:1B:5B:C7:A5:D3:BF:93:56:5B:9D:5A
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x93EE5F032935D4CF91763D2A87BD320C68666FC4B84A511B83110AFF7B57FA26
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 35 (0x0023); /non-TLS-1.3/
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 35:DC:3E:6F:AC:59:0F:AC:A1:C3:31:7A:EF:BA:1C:41:D5:07:71:69:89:1B:5B:C7:A5:D3:BF:93:56:5B:9D:5A
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 72:BB:89:50:04:D5:07:2A:95:FB:7B:71:12:6A:BB:0A:66:0E:D0:8E:02:6C:75:2F:97:EF:BC:C3:15:C3:18:44
Client SessionID: 35:DC:3E:6F:AC:59:0F:AC:A1:C3:31:7A:EF:BA:1C:41:D5:07:71:69:89:1B:5B:C7:A5:D3:BF:93:56:5B:9D:5A
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x68FA38DAEB68B0B6EA29477A84D24081EEF9FFEDB0D622D4E7241EAB547000B4
y = 0xCC8C26BB50DF016DED073EA86C73313E95269BDAD9CDEB31DB7A2E4DDAE5ED05
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 35 (0x0023); /non-TLS-1.3/
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 35:DC:3E:6F:AC:59:0F:AC:A1:C3:31:7A:EF:BA:1C:41:D5:07:71:69:89:1B:5B:C7:A5:D3:BF:93:56:5B:9D:5A
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2697
[...] /skipped 2697 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:31:00:AE:14:32:71:2C:C8:3A:85:62:E4:84:08:B3:27:57:D0:8E:F7:9A:0D:BB:FB:4E
2F:87:07:7F:57:9D:66:63:9D:58:C2:3D:3D:B6:B9:CC:7F:18:58:E7:E4:98:CD:80:E7:02:30:28:CE:B6:BC:F8
2C:C1:5D:98:83:7E:CF:85:93:07:89:E0:A9:BF:3B:44:9A:8D:D2:9A:0D:1D:8F:0A:4C:80:CF:36:0F:42:76:9A
FD:1C:76:7F:5F:0E:44:78:36:36:B1
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
88:6F:2B:73:63:BF:AB:73:CF:43:53:8A:5F:97:3C:36:FE:D7:FD:0E:A3:4F:D6:BD:12:18:E4:E6:5E:42:0C:FE
90:E3:0A:74:A4:FA:B8:25:40:A6:5C:BF:D9:FB:2B:94
CLIENT_FINISHED (received)
Finished value: 0xEEA417C118864681DA237F3FCC544682E004344C2B1E399E492F28538866391F6AF810F31DC860B89506A93909B095AB
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.24:11905; timestamp: 1794497972
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 297ms; ServerHello sent: 149ms (including HelloRetryRequest time); TLS connection established: 296ms.