Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x0017
Second ClientHello, key shares: 0x0018
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0018 (Secp384r1)
(Handshake level)
Handshake secrets:
Client: 0x646D3F51BD95D715F0DA0B093DBD9FF02E2A9E9E509595B91B1B1566CEAAD9EAC22C487E52ACE7C83F81BF2244B3C317
Server: 0x3162131DEE46933C5A45F0391938CDDC87F969A45F0688849FEF2F940D4112C7463EB95A65F01BEC4BA3220EA0A8EF0C
Handshake keys:
Client write: 0xB3D067DF49AC5438E512B1925E7BD08758D62F59D34675C663C46F6652DF88DA
Server write: 0xE8B6923D9705BE634C618E479B2A28C9B1BB49340ECF77E1D49592A2CB50425E
Handshake IVs:
Client write (IV): 0x449113027B9177D83E29AA25
Server write (IV): 0x41E229819A88D13D451B2F88
(Traffic level)
Traffic secrets:
Client: 0xA7D756BC5DE7FCCD9087124A257F9E9AA6EE3E7096B131ECCEAC9E46B7C8ED61E06189E0CB8E254283E3B398DFCA02CC
Server: 0xB604EF46A1463C1B4BFA068CDED13A651CC1F697FC486CD10416EF4205B4A2215AFFB0D26005FDF4FBD90B1E5AF4D04E
KeyUpdates log, server:
0: 0xB98782DC764E25A863F28E66E63A5203539EEEAAECBB8B1BCBE5F9E6A292EE92A8248787F3230B2B7F3130885F0C262C
Traffic keys:
Client write: 0xAAADA99565081B562D7DC648E5416CDCE962C83E87AAE6B56FB1D2DC2BD9E2CA
Server write: 0xE2ABA1759A057958124CEC300CAEF5F521C0A6BFE4337775221F6B26F4E28CCA
KeyUpdates log, server:
0: 0xAF4BC693AC255B66D19B504E8F80FE4A8D9D0B7620C70C33DF5A7F7AA3819E2A
Traffic base IVs:
Client write (base IV): 0x8651516721DC924D1B3D3808
Server write (base IV): 0x451E0461462C398C6E049D20
KeyUpdates log, server:
0: 0x5A06F0326A1CFDB3195D6FD7
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: BF:82:3F:D4:47:AE:90:AB:0A:BD:3D:84:A2:9A:0C:50:EC:A7:AA:89:0A:C0:BA:EF:9B:FD:8A:FF:0B:08:7A:26
Client SessionID: A6:59:88:B4:6D:AD:AC:53:30:04:04:14:DC:44:A7:6D:49:2A:D0:33:A6:05:C2:9D:7D:1F:37:B8:65:B6:BA:60
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x235A26B93F3D89C857B1C95F6BBE6339B629CE358B48197975C4E53E43FB1B1A
y = 0x6806B1B0A7E392F6D6D909518E6C9BC11F1D37D5406286AD05A81BD6A3361975
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: A6:59:88:B4:6D:AD:AC:53:30:04:04:14:DC:44:A7:6D:49:2A:D0:33:A6:05:C2:9D:7D:1F:37:B8:65:B6:BA:60
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: BF:82:3F:D4:47:AE:90:AB:0A:BD:3D:84:A2:9A:0C:50:EC:A7:AA:89:0A:C0:BA:EF:9B:FD:8A:FF:0B:08:7A:26
Client SessionID: A6:59:88:B4:6D:AD:AC:53:30:04:04:14:DC:44:A7:6D:49:2A:D0:33:A6:05:C2:9D:7D:1F:37:B8:65:B6:BA:60
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x2882E3ACB1E44E10B145BBDCAEE0D47670600638C07EC1FA21AED33C3E0108C4F446FA98EB3DA671DF8A1DAA44239E0A
y = 0xCFE0120B1457A74FE3AC7E9F88E2655646CABA8320F65BA34030F2F376530509B543CC92E111718007209A149DA6D834
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: A6:59:88:B4:6D:AD:AC:53:30:04:04:14:DC:44:A7:6D:49:2A:D0:33:A6:05:C2:9D:7D:1F:37:B8:65:B6:BA:60
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x884DFC0FE9602539133D59E3779E9DE8644D3532211C1061EFD16D15BE349D6723496325775E87CF3D396F1C02FCC5CF
y = 0x063315C18E34D26B9085A96A495F17B8557DB379DB6ABED0788C60417FCE917ADD8976BB955D9E7E1B1CC6C06F577280
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2699
[...] /skipped 2699 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:31:00:BF:CB:E7:58:31:5F:84:82:76:73:BF:E5:D4:86:94:8F:26:2C:44:D4:DA:CC:7F
F5:44:22:A2:2E:7B:A4:2C:D9:D4:D5:D0:51:BA:E2:D5:31:80:B6:8F:B6:7D:88:10:C3:02:30:3C:17:DD:60:E8
0A:28:2A:79:A0:90:24:F2:ED:72:18:1E:61:E0:FA:2B:B9:33:97:1F:59:1E:F9:CB:BE:E7:FE:02:48:17:5D:1C
B3:89:6C:71:84:02:D3:FC:9B:7F:33
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
AE:53:21:B3:43:88:8C:2F:FE:13:A6:A2:1F:D0:8B:B9:99:89:EF:C0:3C:A9:EE:94:4F:82:62:33:24:A0:58:5C
22:F3:CA:CF:D6:4B:38:99:03:F8:32:B7:F3:D8:58:F3
CLIENT_FINISHED (received)
Finished value: 0x549B7E96262AA172BE1AE6F43206C3E5787DFB3A53A06B31FADF89FBF91152BC461A4864B817CF7E4CB6A787578377F4
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.6:29939; timestamp: 1791936445
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 295ms; ServerHello sent: 148ms (including HelloRetryRequest time); TLS connection established: 293ms.