Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0018
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0018 (Secp384r1)
(Handshake level)
Handshake secrets:
Client: 0xD2EA955A7155A1D66886282127F83663541E250BFCD287E82BEAAF74E351FC85BEF0ABB0ACB058D5E91FDC3FE7C2D062
Server: 0x143868E8F8E5AF4D6D0C7A686EE2A88B6B4F04D0695C8BF55D094F55659F0CD1802479C8A0C8A122A6EAAC33F2EE204A
Handshake keys:
Client write: 0x91F60A7ADA20967529BB068126A10D77E69290E20D7CCD92D9D8C8B651BDC4A8
Server write: 0x9E3BF7B3EF6840229D9855B3D5F584E4896C034BFD1EB6DF5DF0604F4016D947
Handshake IVs:
Client write (IV): 0xF558150E03577C4DC07D814B
Server write (IV): 0xA28661CE1B6F6BF57DAC2D5A
(Traffic level)
Traffic secrets:
Client: 0xE5F66E9F1DEA755ACD2A1108B9540FE5A2AE2D28EB4319695775799C0BB4623664D00F446B4F3FE779F4FA7AA7E5476B
Server: 0x4F5F1541901B823A1301E77CF2CCBB8E7356D99D48269960F77B76730F1785257FE0E9E1D3A2CE9B25FD04914973A808
KeyUpdates log, server:
0: 0x65C9CA006ABB5F4BFE28A667F047EEF751979DF3FA0DB3ED78385A59927330816356CA3CA425C599C2E29ED696F1ED3B
Traffic keys:
Client write: 0xB4C05E4E350AABFAAB29C6529E7C10F64E86F052941E85DE051D19349A21C387
Server write: 0x1CC032C4F7E2D21D5C993A2FE91CE77F7BC3345421C5DC32E01BD13C4DF73360
KeyUpdates log, server:
0: 0x48B1C84096AFCEFFF156E984FF2B6F5668CC0FBC00456F7D5FAB9657954CF78A
Traffic base IVs:
Client write (base IV): 0xF1BB45EC07BE150DB4B62BE3
Server write (base IV): 0x39A5B6A4A31C255E67DAB88B
KeyUpdates log, server:
0: 0xB0EBE7D7FEBC163A8596A619
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: B0:01:CF:F2:54:51:26:77:36:CB:15:35:CD:70:52:67:D8:95:88:EF:C8:13:E0:15:A1:8D:4A:FB:B7:7C:11:15
Client SessionID: 00:5D:3B:22:8A:EF:AD:73:4A:06:C1:CE:13:7F:4F:D8:24:0D:95:B8:13:77:10:6A:DB:47:2A:90:6A:36:4A:53
Extensions:
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 23 (0x0017); /non-TLS-1.3/
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xF7F1B4260C27AE13B3419A6E41D3F1BCF72E9F124D4E1CEEBA54AFFB69A0E90D
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 00:5D:3B:22:8A:EF:AD:73:4A:06:C1:CE:13:7F:4F:D8:24:0D:95:B8:13:77:10:6A:DB:47:2A:90:6A:36:4A:53
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: B0:01:CF:F2:54:51:26:77:36:CB:15:35:CD:70:52:67:D8:95:88:EF:C8:13:E0:15:A1:8D:4A:FB:B7:7C:11:15
Client SessionID: 00:5D:3B:22:8A:EF:AD:73:4A:06:C1:CE:13:7F:4F:D8:24:0D:95:B8:13:77:10:6A:DB:47:2A:90:6A:36:4A:53
Extensions:
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 23 (0x0017); /non-TLS-1.3/
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x0D6F873EEEDE5BE43BDC2AE2C797F3468FCBEB79D72BBC04499B26FCE10B7BBE2EE50487267F6FC9823C20D4B417D716
y = 0x49F176A62167E20A3458A873AEAAA8E71B919220414226031A9C2E3853D3EF1DB8986D0254B4764B2F399C4B21EE4472
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 00:5D:3B:22:8A:EF:AD:73:4A:06:C1:CE:13:7F:4F:D8:24:0D:95:B8:13:77:10:6A:DB:47:2A:90:6A:36:4A:53
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x884DFC0FE9602539133D59E3779E9DE8644D3532211C1061EFD16D15BE349D6723496325775E87CF3D396F1C02FCC5CF
y = 0x063315C18E34D26B9085A96A495F17B8557DB379DB6ABED0788C60417FCE917ADD8976BB955D9E7E1B1CC6C06F577280
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2699
[...] /skipped 2699 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 108
05:03:00:68:30:66:02:31:00:C5:92:33:F8:6B:EE:59:B5:66:B2:E4:A6:2C:58:33:02:8A:73:42:3E:03:F6:43
FF:5F:AB:16:AC:79:57:39:51:51:CB:DA:2E:65:1F:8B:7E:B9:01:D2:93:F3:79:6B:8A:02:31:00:C2:2D:BF:35
44:FB:31:DA:E8:59:A3:10:9D:8D:70:DD:DF:1A:E4:7B:92:1B:A4:1A:E1:92:95:11:CB:F6:8D:96:80:82:E1:17
0C:FE:DF:3E:B5:FA:6E:00:0F:DD:A1:AE
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
23:AB:21:D3:2B:E4:B8:69:37:01:B4:B9:27:09:9A:63:E8:19:EA:11:B7:F5:E8:03:BC:57:FF:F3:AB:76:B6:E1
35:21:2C:DD:54:AB:CB:F0:6F:1B:57:77:17:1E:6D:E7
CLIENT_FINISHED (received)
Finished value: 0x4425F18317B2A6EA944564829F889F61C1A83D25F9C6C6C0AAF10C537EA9692A3C01309E75D348E5229FE952AA581407
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.217.152:2372; timestamp: 1790295112
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 289ms; ServerHello sent: 148ms (including HelloRetryRequest time); TLS connection established: 289ms.