Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0x8B18C35C5FA400B69D48C12FB3E4FEF8670A3346EB60A45BB5CEDC3D4F1955A1
Server: 0xD73B9EDE5889BEAC5A5DFE5C61785D45F0B5969A1EFBE7DE5496438C1CBC2374
Handshake keys:
Client write: 0xDADFE205351A251E44EC7BF4B3625F10
Server write: 0x51D1742180C8C30E5CF5BB4A9E05018A
Handshake IVs:
Client write (IV): 0xD0C7D3ACA080B59078BCA116
Server write (IV): 0x8995A61B65F2BAD7B6990A28
(Traffic level)
Traffic secrets:
Client: 0x4555BE5E497444340EE3F09B08CA9EE667F4AAEF635E623C48E0DC2901DA9A22
Server: 0x61FCFB278BCA94A8BB96DAC829A370DE2DD17D28AE08ECA25D3FCD622CB5C29F
Traffic keys:
Client write: 0x856E4ADFB1EA8907840D4E7E48C59556
Server write: 0x08E83CFB478B0F1A39A0C28EE0790E36
Traffic base IVs:
Client write (base IV): 0x951D3F4B1A460A8226A35BB6
Server write (base IV): 0x61134285BFB5AB939E98E896
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: BE:15:FD:5A:3A:38:FB:5A:61:66:D5:76:E1:C0:60:EA:F6:22:45:AE:F4:33:FA:F9:EC:60:2B:0C:B3:AF:85:D9
Client SessionID: 18:A0:9C:E0:70:F5:4C:D0:A0:C0:4C:59:80:FC:7B:F7:1E:5E:76:A8:81:0F:2A:6C:15:5A:01:3F:1C:FB:CD:C5
Extensions:
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 35 (0x0023); /non-TLS-1.3/
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x18571A781811812CAA86AB7918377D5E3F824B697DD04D20A7525E78E075CD02
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 18:A0:9C:E0:70:F5:4C:D0:A0:C0:4C:59:80:FC:7B:F7:1E:5E:76:A8:81:0F:2A:6C:15:5A:01:3F:1C:FB:CD:C5
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: BE:15:FD:5A:3A:38:FB:5A:61:66:D5:76:E1:C0:60:EA:F6:22:45:AE:F4:33:FA:F9:EC:60:2B:0C:B3:AF:85:D9
Client SessionID: 18:A0:9C:E0:70:F5:4C:D0:A0:C0:4C:59:80:FC:7B:F7:1E:5E:76:A8:81:0F:2A:6C:15:5A:01:3F:1C:FB:CD:C5
Extensions:
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 35 (0x0023); /non-TLS-1.3/
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0xC40B94B3F4BC406BE59F9E691BFE5A79008ADC69AD8AD55DFAE950547ED56743
y = 0xB6B7720F3F3E6CE83AC4DF685A9745149AF95564B4DA9754339B612F9EDF7760
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 11 (0x000B); /non-TLS-1.3/
01:00
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 18:A0:9C:E0:70:F5:4C:D0:A0:C0:4C:59:80:FC:7B:F7:1E:5E:76:A8:81:0F:2A:6C:15:5A:01:3F:1C:FB:CD:C5
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2700
[...] /skipped 2700 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 106
05:03:00:66:30:64:02:30:26:FB:4A:DC:5E:DD:59:01:4C:4A:96:09:55:55:4D:02:E2:5D:98:CE:08:AE:C7:C3
84:E5:61:4B:24:71:86:CD:1D:3F:38:14:A1:79:5F:B4:7E:B3:19:7B:1B:B3:48:7B:02:30:22:16:6F:21:C8:77
E7:E5:F0:95:0C:4B:81:8D:1C:48:D0:E7:AB:05:3F:62:74:31:9B:AB:F6:FB:35:82:3F:6F:4D:2B:88:C3:8B:1E
58:8E:21:EC:E4:A0:96:7F:2F:88
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
54:B7:4C:F4:FF:90:B9:74:49:BF:47:5C:9E:7A:0E:E8:44:A4:3F:DF:B5:BA:DB:78:ED:54:A3:DA:09:92:A3:BC
CLIENT_FINISHED (received)
Finished value: 0x1186D286128B4F8C7FC251F9CBEDD7BDEB2FB56963409AB2D7A60668A555C315
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
TCP: server: 194.87.103.72:443; client: 216.73.217.174:32149; timestamp: 1794076483
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 291ms; ServerHello sent: 147ms (including HelloRetryRequest time); TLS connection established: 291ms.