Successfully connected
TLS 1.3 OK; HelloRetryRequest used;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0019
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Key exchange: 0x0019 (Secp521r1)
(Handshake level)
Handshake secrets:
Client: 0x5B405C11EB46B75B594BD9A7D5DCFF62AC634E366A64D89D9C9E68E2820182FE
Server: 0xB3831512BE5A8F4DA722BA97B0FF1D59F73B1136549A08F97DD348B3E65EF73B
Handshake keys:
Client write: 0x96282FF2A8DE59112232715BDE221A0A3D312CCD392E22B3E9663889E95D34A9
Server write: 0x9816072F38705EB960C660EBBF496EA602CD2C2318DE0FBCDC3F749099FE900B
Handshake IVs:
Client write (IV): 0xF979ED56D512937476B80966
Server write (IV): 0x461E16DC9703164F725E3E80
(Traffic level)
Traffic secrets:
Client: 0xB7CFDD6C67BABE0BD567F714ED5C82F7373431A60A725BBB1C46E974CF768788
Server: 0xF2EA79A1B913D23B2703F25681F0C1BAC899DD89B981CCE30CE23DDF39D2883C
Traffic keys:
Client write: 0x5557A327F488DB3D02100D883F3C3E03323E1751332AD1947B7BDC0A3EC5D620
Server write: 0xB360A8288D83E746561A3E59E2634780F460DFC9F854B4C036AD49B2672D8764
Traffic base IVs:
Client write (base IV): 0xD6448C294F91257F1DA01450
Server write (base IV): 0x5B7CF19811154BFC66F11E8C
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1301,0x1302,0x1303,0xC02B,0xC02F,0xC02C,0xC030,0xCCA9
0xCCA8,0xC013,0xC014
Client Random: 93:65:0B:A3:92:73:EB:7E:18:D3:16:84:54:E9:73:2A:8E:DF:35:9B:59:01:CE:F7:7F:00:89:78:92:A3:F4:4B
Client SessionID: 82:AC:52:7D:3F:E0:B8:31:38:D5:65:E9:82:08:E0:34:CE:93:5F:CB:30:3A:13:FD:08:72:A7:59:82:5E:AD:11
Extensions:
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
0x0019 (Secp521r1)
0x001E (X448)
0x0100 (ffdhe2048)
0x0101 (ffdhe3072)
0x0102 (ffdhe4096)
0x0103 (ffdhe6144)
0x0104 (ffdhe8192)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 13 (0x000D); "signature_algorithms"
0x0403 (ECDSA_SECP256R1_SHA256)
0x0503 (ECDSA_SECP384R1_SHA384)
0x0603 (ECDSA_SECP521R1_SHA512)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0809 (RSA_PSS_PSS_SHA256)
0x080A (RSA_PSS_PSS_SHA384)
0x080B (RSA_PSS_PSS_SHA512)
0x0401 (RSA_PKCS1_SHA256)
0x0501 (RSA_PKCS1_SHA384)
0x0601 (RSA_PKCS1_SHA512)
0x0402 _unknown_
0x0303 _unknown_
0x0301 _unknown_
0x0302 _unknown_
Type: 50 (0x0032); "signature_algorithms_cert"
00:26:04:03:05:03:06:03:08:04:08:05:08:06:08:09
08:0A:08:0B:04:01:05:01:06:01:04:02:03:03:03:01
03:02:02:03:02:01:02:02
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 17 (0x0011); /non-TLS-1.3/
00:07:02:00:04:00:00:00:00
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xB284B2E3A98CE4153EBF742A982D8B5876A58D50B9D0D2E80AD68BB2988C0C7B
Type: 65281 (0xFF01); /non-TLS-1.3/
00
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 82:AC:52:7D:3F:E0:B8:31:38:D5:65:E9:82:08:E0:34:CE:93:5F:CB:30:3A:13:FD:08:72:A7:59:82:5E:AD:11
Extensions:
Type: 51 (0x0033); "key_share"
Secp521r1 (0x0019)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1301,0x1302,0x1303,0xC02B,0xC02F,0xC02C,0xC030,0xCCA9
0xCCA8,0xC013,0xC014
Client Random: 93:65:0B:A3:92:73:EB:7E:18:D3:16:84:54:E9:73:2A:8E:DF:35:9B:59:01:CE:F7:7F:00:89:78:92:A3:F4:4B
Client SessionID: 82:AC:52:7D:3F:E0:B8:31:38:D5:65:E9:82:08:E0:34:CE:93:5F:CB:30:3A:13:FD:08:72:A7:59:82:5E:AD:11
Extensions:
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
0x0019 (Secp521r1)
0x001E (X448)
0x0100 (ffdhe2048)
0x0101 (ffdhe3072)
0x0102 (ffdhe4096)
0x0103 (ffdhe6144)
0x0104 (ffdhe8192)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 13 (0x000D); "signature_algorithms"
0x0403 (ECDSA_SECP256R1_SHA256)
0x0503 (ECDSA_SECP384R1_SHA384)
0x0603 (ECDSA_SECP521R1_SHA512)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0809 (RSA_PSS_PSS_SHA256)
0x080A (RSA_PSS_PSS_SHA384)
0x080B (RSA_PSS_PSS_SHA512)
0x0401 (RSA_PKCS1_SHA256)
0x0501 (RSA_PKCS1_SHA384)
0x0601 (RSA_PKCS1_SHA512)
0x0402 _unknown_
0x0303 _unknown_
0x0301 _unknown_
0x0302 _unknown_
Type: 50 (0x0032); "signature_algorithms_cert"
00:26:04:03:05:03:06:03:08:04:08:05:08:06:08:09
08:0A:08:0B:04:01:05:01:06:01:04:02:03:03:03:01
03:02:02:03:02:01:02:02
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 17 (0x0011); /non-TLS-1.3/
00:07:02:00:04:00:00:00:00
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 51 (0x0033); "key_share"
Secp521r1 (0x0019)
x = 0x002D0576FC7D435F51B6F7F82403C24F9AAF14DB5B146800A1A6B9207FBBC466EB68AFB092CD44AF6C610D579CC60EE3050AF8FC1AD1A294083F663FF021E2598F17
y = 0x00D0CC3904F05DFA5F3C0F48F349A0AD4B76C6839E131987DE97936FC2F578594E6535434FCBB5726D9054B1788802FFB494052A3AD992B39EA20CCBA3742B989082
Type: 65281 (0xFF01); /non-TLS-1.3/
00
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 82:AC:52:7D:3F:E0:B8:31:38:D5:65:E9:82:08:E0:34:CE:93:5F:CB:30:3A:13:FD:08:72:A7:59:82:5E:AD:11
Extensions:
Type: 51 (0x0033); "key_share"
Secp521r1 (0x0019)
Group 0x0019 (key share not printed)
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2698
[...] /skipped 2698 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:30:63:A7:F1:0E:D5:29:37:48:15:FE:1B:D6:59:81:86:DB:E4:8B:69:37:B3:B6:5D:BF
47:D4:E0:B6:E1:B8:15:95:ED:3D:68:8E:1B:D5:87:44:C8:C2:28:D4:DF:7D:B8:E7:02:31:00:99:A4:E1:F8:19
EA:42:10:89:7D:4A:20:B9:D7:00:23:68:FA:8C:06:C0:BF:D2:6B:65:92:88:9F:41:8E:A3:4B:30:23:51:94:94
92:C1:F0:6D:81:31:1B:C5:1D:F2:B5
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
BE:22:1B:54:7E:8D:EE:D7:71:7C:B9:B2:C4:00:F4:DB:3E:13:15:34:0C:CB:AC:D0:73:C9:EB:F1:05:E4:DC:04
[Legacy ChangeCipherSpec message present (client)]
CLIENT_FINISHED (received)
Finished value: 0x55DC69C66C6C6090A1192DD6C5DAFD9D91856989FBA1A139B6A61E71307B1EDF
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..User-Agent: CCBot/2.0 (https://commoncrawl.org/f
aq/)..Accept: text/html,application/xhtml+xml,application/xml;q=
0.9,*/*;q=0.8..Accept-Language: en-US,en;q=0.5..If-Modified-Sinc
e: Wed, 16 Sep 2026 18:37:16 GMT..Accept-Encoding: zstd, br, gzi
p..Host: tls13.1d.pw..Connection: Keep-Alive....
TCP: server: 194.87.103.72:443; client: 18.97.14.90:53106; timestamp: 1791862034
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 436ms; ServerHello sent: 139ms (including HelloRetryRequest time); TLS connection established: 435ms.