Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x0018
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0x564F07B1B159A18CB11E516FC70D20DA37A2A72911A2D1F2DDE4E4008A4DFD0E9B8B77A5F7C1A1C6720D6EC6BC40CF80
Server: 0x5F599ABBD01FA72D65E19F1B70F1EA8C74EF296A108671A2F299040A9C2C3CC8BA894387F87F65E20E5A2A7FA5255646
Handshake keys:
Client write: 0xE68F2693AC50BB50FD47F9ACF9BAD34828B726F360A91CB5A9BA4A6E516B6BD4
Server write: 0x0DE7B29543CC0D199DAC58D3C3F4D29E520E065AB77C53C836109C5AD1547111
Handshake IVs:
Client write (IV): 0x7E0445EE0895690F0D0B8514
Server write (IV): 0xAA74FF09551F3CDD3E63DB95
(Traffic level)
Traffic secrets:
Client: 0xA03C9321CC034FC3C16B4F3176930551CDCC7AC151F1737612E68483E303DAF18C3992B247C18137DF9F5AD1622A21FA
Server: 0x17760FBE2B62411EC2E208D5245755A01AC94AE59815E8F18285B487B8464524619D9CCFCB8105FB395AC87E6894ED5B
Traffic keys:
Client write: 0xF1C855E09EEC729F892450EF4AACB607AA5F6718576344050FB61D21CA86C3A0
Server write: 0x237496B478C8986136903223353BB455252B0DCF3CF45291532B1AC4AF79C6CE
Traffic base IVs:
Client write (base IV): 0x017CB16A07E73EB35A550552
Server write (base IV): 0x8A90A85D299647089A89D87D
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 77:E9:F2:86:20:54:45:38:38:43:46:53:DB:3B:A6:CA:4F:F6:5D:B3:66:C4:F4:E7:C7:0B:EB:06:49:92:93:19
Client SessionID: 59:74:44:BE:D0:99:A2:AC:62:12:4A:83:37:8F:3E:43:CB:7E:DC:B6:EB:57:2B:3A:F3:E8:D6:12:C0:0A:D6:8F
Extensions:
Type: 35 (0x0023); /non-TLS-1.3/
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x26299F42501996AA2A166C36311F5692003033DE7811177E23BE8797B8FF871B31C62E85B67659833CC62A75100A3ED0
y = 0xDDCB68130EF7CAE65A61A115E484A990817EDF4FF73D31EABAB99F9EE596D85781CC79ED2A35B0246EA9DB430F2EDBA9
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 23 (0x0017); /non-TLS-1.3/
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 59:74:44:BE:D0:99:A2:AC:62:12:4A:83:37:8F:3E:43:CB:7E:DC:B6:EB:57:2B:3A:F3:E8:D6:12:C0:0A:D6:8F
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 77:E9:F2:86:20:54:45:38:38:43:46:53:DB:3B:A6:CA:4F:F6:5D:B3:66:C4:F4:E7:C7:0B:EB:06:49:92:93:19
Client SessionID: 59:74:44:BE:D0:99:A2:AC:62:12:4A:83:37:8F:3E:43:CB:7E:DC:B6:EB:57:2B:3A:F3:E8:D6:12:C0:0A:D6:8F
Extensions:
Type: 35 (0x0023); /non-TLS-1.3/
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x4827185C2789366754F087062B414DC06A9A0CBB1659E01B265B4C44BF570486
y = 0x6C13634BF1BD9408EDE99F202041BEAA40869D7F06B1325BAB28519B08C2E719
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 23 (0x0017); /non-TLS-1.3/
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 59:74:44:BE:D0:99:A2:AC:62:12:4A:83:37:8F:3E:43:CB:7E:DC:B6:EB:57:2B:3A:F3:E8:D6:12:C0:0A:D6:8F
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2698
[...] /skipped 2698 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:31:00:C6:4F:5C:A6:53:1F:80:42:D2:E6:24:1B:45:56:3F:E8:5B:4E:B5:D0:B8:73:00
E2:C8:40:58:2F:D3:40:04:EB:AD:1C:27:0E:E0:63:8B:6E:6A:16:8A:CE:12:88:DB:67:02:30:1C:9A:BB:98:78
2E:E1:1C:0D:98:07:E0:E5:50:8D:1D:30:FE:FE:9B:3D:A7:9D:58:83:79:A8:EB:D7:E2:02:F0:B7:6D:2F:A4:8B
A4:50:6A:52:F2:1B:F3:83:DD:9E:5A
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
F5:3A:A2:2E:C9:F5:4C:C3:CC:77:D2:6D:3E:68:27:3C:97:53:73:9A:DC:68:0B:F7:88:3B:5F:91:8B:29:28:6A
3F:90:10:97:DD:87:A8:82:09:8E:AC:5F:B2:F8:15:F6
CLIENT_FINISHED (received)
Finished value: 0x1342AC7B332F8974C8226C872A3E1ACA89DF0FE9481F6BAF3764DF91FBA051A66F82CE0E3E258A91E5BECC2DE9CACE9C
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
TCP: server: 194.87.103.72:443; client: 216.73.216.236:40281; timestamp: 1790208582
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 283ms; ServerHello sent: 141ms (including HelloRetryRequest time); TLS connection established: 283ms.