Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0xD56D76746C1B6BD4D311D18B5E9FB41CD0A6EC1B7E1E60F55593E584DFB49918
Server: 0x9C2A37C520D6D97999A4DAF82D0FEAF079052BA15EF634C1C8AEB70E5D561D33
Handshake keys:
Client write: 0x2101983213ECFD302D33F0FA77612808
Server write: 0xEF30E46F47CB6F8E03AE687F50C221B5
Handshake IVs:
Client write (IV): 0x2571ECBEB31A94BBECB22C99
Server write (IV): 0xC37005F24D78550F26F8FBE1
(Traffic level)
Traffic secrets:
Client: 0xA3E505E85DE4C26BC4B238FB1B6CB9F04B328DD29658608EF10D4743E5678CD8
Server: 0x691CBB96BDBF1735207571C8E7F77A33885CE4F0C86BBC81B5F9CA68A3707993
KeyUpdates log, server:
0: 0x145C914BD1F3D41AB7A233AEAEAEA4DE7B439FDC3C0A526E69C4ED59076F5864
Traffic keys:
Client write: 0x55B3095C89D6EB8C22B83BD5535D09B3
Server write: 0x1349E7702804A469E4F9D45DCD6A5943
KeyUpdates log, server:
0: 0x2072B2C32F70B799257E99AF41CFB381
Traffic base IVs:
Client write (base IV): 0xE8979BCF08999FBBF31AA7BD
Server write (base IV): 0x5ECC143AF2D295D2D1CE003C
KeyUpdates log, server:
0: 0xA4AD5133769DBCD660E4F5EC
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 1D:2C:A0:18:D4:85:B7:DF:E5:BA:37:6E:DD:16:D5:76:F4:9C:7C:F1:0A:B0:A7:4E:1D:45:FE:54:3C:11:99:F1
Client SessionID: 8D:70:97:19:D3:61:BD:51:09:25:9C:16:5E:8C:0A:A3:54:D0:2C:67:9F:45:79:E7:58:3A:F8:E3:9D:69:42:63
Extensions:
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0x7185B40179FD7A0B557AF94959ABECF88D0E58EB7CEF7727AFD12908882AAE51
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 05 (0x0005); "status_request"
01:00:00:00:00
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 8D:70:97:19:D3:61:BD:51:09:25:9C:16:5E:8C:0A:A3:54:D0:2C:67:9F:45:79:E7:58:3A:F8:E3:9D:69:42:63
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: 1D:2C:A0:18:D4:85:B7:DF:E5:BA:37:6E:DD:16:D5:76:F4:9C:7C:F1:0A:B0:A7:4E:1D:45:FE:54:3C:11:99:F1
Client SessionID: 8D:70:97:19:D3:61:BD:51:09:25:9C:16:5E:8C:0A:A3:54:D0:2C:67:9F:45:79:E7:58:3A:F8:E3:9D:69:42:63
Extensions:
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 23 (0x0017); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x82A6F97BAC735146F0446CD5D9E715E771EAFB4F28EF3B6EDDA99118776A65B9
y = 0xC31234FD1C77487C1042905C6F1B3CA33D460F27791CCACB96F39709A7FDB409
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 05 (0x0005); "status_request"
01:00:00:00:00
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1301 (TLS_AES_128_GCM_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 8D:70:97:19:D3:61:BD:51:09:25:9C:16:5E:8C:0A:A3:54:D0:2C:67:9F:45:79:E7:58:3A:F8:E3:9D:69:42:63
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2698
[...] /skipped 2698 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:31:00:EA:DB:26:89:41:6C:4B:42:F5:95:33:5A:3F:78:67:22:4C:1D:AE:B6:41:84:0C
3B:C2:E3:C8:A1:09:A7:37:C2:7E:01:07:A9:BC:B1:F3:6F:08:3D:6A:52:61:D0:CA:D4:02:30:37:A4:42:DE:24
26:6E:2F:9F:74:03:44:37:BF:D3:13:54:69:8A:4F:21:30:10:AC:84:B9:F9:1E:5D:28:81:29:35:BF:46:A7:4F
FC:E2:8D:D8:1E:DD:D2:71:1E:F1:C1
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
B3:11:76:CE:B2:5F:86:64:E3:44:F3:4E:F8:D3:C4:09:D3:B4:58:A2:41:E2:A6:5D:6D:43:D5:A9:00:2E:8A:87
CLIENT_FINISHED (received)
Finished value: 0xB5D4553A782782E0E73FDE0208F972CE2C847C4F180B6136F9C7CC0793066418
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.236:3567; timestamp: 1790121590
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 293ms; ServerHello sent: 151ms (including HelloRetryRequest time); TLS connection established: 293ms.