Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0x80900092128884F94E39CA95A09DD359D6D3577D97F045268F5B5BDE7D4F110C
Server: 0x438EA0C239D49CB2BB37504EB5664A8BB0E7A6873759DDF9CFEDB2D2B252D25B
Handshake keys:
Client write: 0x9453B2482E33702EB9F0D232A677F86E
Server write: 0x014FFC25928F995B07A8FEF52BDAC6A6
Handshake IVs:
Client write (IV): 0x57B8941765C5A53E24125B02
Server write (IV): 0xF9BE237CBEBCEA401CCC3BA3
(Traffic level)
Traffic secrets:
Client: 0xFE2F63738684CF58D7750AED109F749D288DE835C1ED795A2FFF1C2655330CBC
Server: 0xAA8450E603B02229A11BD8EF67AF099B90AE6D29FE348CA37114C005F97516EA
Traffic keys:
Client write: 0x47E2AAE8094E2BBEBF53EB27C629D1D0
Server write: 0x73794F905B6FE75D1DAD055A99C8CF7F
Traffic base IVs:
Client write (base IV): 0x169936EEECBF3A4887D05068
Server write (base IV): 0xB66EA93477A6ECC71D3310E0
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: D8:DF:25:9E:FA:CE:90:F4:82:75:9F:EF:11:16:7B:24:F9:9D:4A:1C:0E:91:EB:A1:5A:9D:39:F3:FD:3C:17:9B
Client SessionID: 20:AC:68:12:A9:03:6D:03:7A:C3:4D:4B:41:EE:BB:1D:0F:7B:7E:76:D7:9F:71:BB:84:B2:06:0A:E2:84:E5:59
Extensions:
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xA85A3CB5CEC0B530E43C62BCFFE63EEDE721E9699C9B3605ACFB33049E6C8973
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 23 (0x0017); /non-TLS-1.3/
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 20:AC:68:12:A9:03:6D:03:7A:C3:4D:4B:41:EE:BB:1D:0F:7B:7E:76:D7:9F:71:BB:84:B2:06:0A:E2:84:E5:59
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: D8:DF:25:9E:FA:CE:90:F4:82:75:9F:EF:11:16:7B:24:F9:9D:4A:1C:0E:91:EB:A1:5A:9D:39:F3:FD:3C:17:9B
Client SessionID: 20:AC:68:12:A9:03:6D:03:7A:C3:4D:4B:41:EE:BB:1D:0F:7B:7E:76:D7:9F:71:BB:84:B2:06:0A:E2:84:E5:59
Extensions:
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x9D8D4CD62F5AA055D13904682DB112C535A6575EBBF4799DF0762D8EF7F480EB
y = 0x015FF63D36EC95FF35634025CCBEF5867BF52E27B18545AC62F717FFA107B4D6
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 23 (0x0017); /non-TLS-1.3/
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 20:AC:68:12:A9:03:6D:03:7A:C3:4D:4B:41:EE:BB:1D:0F:7B:7E:76:D7:9F:71:BB:84:B2:06:0A:E2:84:E5:59
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2699
[...] /skipped 2699 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 108
05:03:00:68:30:66:02:31:00:9E:15:C8:D2:6E:F8:ED:82:EC:71:9E:60:8F:0A:C6:E1:01:E5:8D:D1:69:33:DE
94:A6:8D:8F:B0:FE:B5:20:10:CA:A0:BB:1B:4F:59:8D:21:DA:AA:1D:6B:81:CA:8E:D3:02:31:00:CD:3D:08:7B
53:B1:02:BA:9E:20:9F:94:32:F3:96:DD:83:B0:4D:C3:A8:4B:67:9F:8A:3F:B3:F3:C4:F1:7C:C8:4B:4F:5A:74
0F:BE:48:FA:1D:07:E0:8F:6D:12:08:C9
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
E0:6E:BE:C9:02:58:60:54:03:D2:43:0A:92:6E:E3:1E:12:04:BE:7D:4F:D3:0A:B4:32:05:10:F1:D3:71:75:44
CLIENT_FINISHED (received)
Finished value: 0xA6961D824ACF40DC6C4E8B711040D91075CC62D74D5F76603937862ADA2E9074
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
TCP: server: 194.87.103.72:443; client: 216.73.216.187:57010; timestamp: 1790381107
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 304ms; ServerHello sent: 154ms (including HelloRetryRequest time); TLS connection established: 304ms.