Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0xFFED6F0A2C9600690E7CD53542C6FBC0A31690F78613D027D2A11179555E080646F726A4608389CF7294E61C4335E49C
Server: 0xC5A1092114F2CF48B645086B5464774FE350528B65383DC912DBC7900EA9AB0931CD043E6776FABD5F59B4B3AD5D586B
Handshake keys:
Client write: 0x806EDFA238FF1A57F6DD2F2FF7C4A0C6100A4CCC28D3DFAA243E7DE57AE84AB6
Server write: 0x3BB5B729AD4F09F2BB6BF9C98787B3F311CBD7EAE6D0A8B625CDDBFC09D7EE9F
Handshake IVs:
Client write (IV): 0x51D54FA6B370A6A9E971A892
Server write (IV): 0x51748943C1AD90497F559902
(Traffic level)
Traffic secrets:
Client: 0xF37460CF42545E1987890EAB619C9704CCB091EDB84653169B2DC3B65F56DCC431727D54F1323D56CAF9FC23E88DCA99
Server: 0x6D0E0911FA51362E7760645DB9FD2E6BA9E17299F54F1CA7F7190B397A67365EF6D60F422BED3A6DBCC8DBC71985D195
Traffic keys:
Client write: 0x00ED53F712BEC9E77E358181A862058181CAEE10B880CEEF63A4CE4CB9AFBD3A
Server write: 0xC97334EA9C0F35D764630522199F57363FF927E287794E5F0FCD6353EEE4FDD4
Traffic base IVs:
Client write (base IV): 0x74BCB29D6D30D07198764E89
Server write (base IV): 0xAF56B1A0853A9105D35F7989
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 58:06:A9:4D:2B:5E:E0:3C:97:A1:72:AE:D4:7C:26:89:81:2B:8C:86:46:AA:54:DF:62:27:77:CD:19:69:C6:B2
Client SessionID: 84:3E:A1:6F:C7:8C:57:21:81:69:DC:10:1C:FD:AF:6A:8F:A9:E8:85:3A:4A:A1:D3:DD:F6:8C:69:99:87:B1:BC
Extensions:
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 23 (0x0017); /non-TLS-1.3/
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x635415406AC19B0DB5BCFEE14D2E0D434272D61940EDB51CD7F2CDCA43B56C61
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 84:3E:A1:6F:C7:8C:57:21:81:69:DC:10:1C:FD:AF:6A:8F:A9:E8:85:3A:4A:A1:D3:DD:F6:8C:69:99:87:B1:BC
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 58:06:A9:4D:2B:5E:E0:3C:97:A1:72:AE:D4:7C:26:89:81:2B:8C:86:46:AA:54:DF:62:27:77:CD:19:69:C6:B2
Client SessionID: 84:3E:A1:6F:C7:8C:57:21:81:69:DC:10:1C:FD:AF:6A:8F:A9:E8:85:3A:4A:A1:D3:DD:F6:8C:69:99:87:B1:BC
Extensions:
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 23 (0x0017); /non-TLS-1.3/
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x5CCF405F980EF926BE37991E4B313FC8BAE07B21E3DFE71F5DBD07D3CB8B9FC7
y = 0x7AC9FD478F11F07D290392E53B5999370972DC9193CDC2EFC4BEA0A0E1860355
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 84:3E:A1:6F:C7:8C:57:21:81:69:DC:10:1C:FD:AF:6A:8F:A9:E8:85:3A:4A:A1:D3:DD:F6:8C:69:99:87:B1:BC
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2698
[...] /skipped 2698 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 106
05:03:00:66:30:64:02:30:01:69:55:B4:C8:15:A8:A9:81:E6:9A:25:C8:11:6F:2F:8A:4D:E2:94:B5:CE:2E:16
A9:C5:4B:49:F1:42:64:FE:CD:85:4F:F8:ED:E5:34:C9:8E:8B:85:FE:3C:4C:6A:30:02:30:5D:43:15:BA:D5:C9
FE:7B:5B:47:A6:79:70:F6:94:CD:39:F2:30:6F:E6:49:FF:BA:79:54:BD:AA:57:9C:6B:32:69:08:DB:79:15:B1
90:19:56:2C:A6:88:B2:3F:8B:E1
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
A5:4F:A1:2D:E8:B9:AC:24:EF:B7:4B:E8:A7:CA:0B:EA:72:01:11:99:41:74:68:D2:07:92:36:2D:1B:9A:36:B7
6E:90:5F:56:98:DE:54:05:BC:37:9E:20:9C:A6:2E:FD
CLIENT_FINISHED (received)
Finished value: 0xCA4072E6C8B4281910E7837A5363FA38EEAF772C4D852BC45EDA3A914DA5C6A8CD89A43352254CC6290F3FBD3274DC36
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
TCP: server: 194.87.103.72:443; client: 216.73.217.33:47770; timestamp: 1793096533
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 290ms; ServerHello sent: 143ms (including HelloRetryRequest time); TLS connection established: 289ms.