Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x0017
Second ClientHello, key shares: 0x0018
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Key exchange: 0x0018 (Secp384r1)
(Handshake level)
Handshake secrets:
Client: 0xFA914535A62A62704F7CCEBE151C6A241539BBA640238B115688BC7224244D387007CB67D65BA8E6F73CB0D4107BADAB
Server: 0x36B193B471FB6CEF577759A1D75288349ADF66BE6A3E4F92F180617E121223D6EFC2AA18664E4FB8C9164CBF0D93519A
Handshake keys:
Client write: 0xB1DF5AEA2F68FC9EC043289165021F7C4560CC1BABC583A1491542118BDCE0FC
Server write: 0xA672BE8EE266C22A521057038F0EC0D9CB03B66517F6BB636749F817FBAF084A
Handshake IVs:
Client write (IV): 0x92385D2570997F3539FE435E
Server write (IV): 0x2017D022B1665BEF1C58AD42
(Traffic level)
Traffic secrets:
Client: 0x6D42F5B552684EE2D86D0D5061A22E1828F2DBCBC7FC289BB67CFCCB2F82DDC8241C5AFBB4B7CFE363117683830B5854
Server: 0x53B032188AA110D396301E5012F8119D58A502C2A7FB9842FCFD4EB5DFB20DC41B67E86E79324D00680C2D19024DD9F9
KeyUpdates log, server:
0: 0x7C22395242BFFA4C46B5B714D6CEED443D85E78BF76A2EFED1D9620651E1437AE6FCA948818EC0EF9A88E004AA1D0315
Traffic keys:
Client write: 0x0ECCB53025831ECB5FDD7EA2EBB4D399FDD5D4A6F6F834187A1379210AC7B505
Server write: 0xEDB87C024C776BE6358FDE4D503BC5221D3E794BC0514EB53E3B2196C66B45A5
KeyUpdates log, server:
0: 0xE0088DA25477946AE6626EBDDD4B631FD38D2EBD3F013D26557B78A315203BED
Traffic base IVs:
Client write (base IV): 0x008AC9CCEA4D8C9E1F2308FC
Server write (base IV): 0x954C1E28EEBEBC83927FF833
KeyUpdates log, server:
0: 0xC584DFD5B4DA88F7E44B0D75
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: A2:13:89:12:80:80:CD:44:0E:67:6B:77:9C:1C:53:BE:CF:86:CA:91:4C:E0:6A:24:F9:35:C4:7F:4E:A6:8C:5A
Client SessionID: 0B:B2:37:E0:44:70:25:C4:D9:49:9E:16:8F:B5:F7:C4:2E:CC:12:F6:53:C7:1A:B3:54:4F:CB:B0:75:62:0C:72
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x15CBB263520AA9919956989AEF040001D681C118BEF9F6B0E9D4AB6C666510C5
y = 0x0806286C892421C6AE1D007B5C54C97D3EE7051F6359A399687E9501A0106475
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 11 (0x000B); /non-TLS-1.3/
01:00
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: 0B:B2:37:E0:44:70:25:C4:D9:49:9E:16:8F:B5:F7:C4:2E:CC:12:F6:53:C7:1A:B3:54:4F:CB:B0:75:62:0C:72
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: A2:13:89:12:80:80:CD:44:0E:67:6B:77:9C:1C:53:BE:CF:86:CA:91:4C:E0:6A:24:F9:35:C4:7F:4E:A6:8C:5A
Client SessionID: 0B:B2:37:E0:44:70:25:C4:D9:49:9E:16:8F:B5:F7:C4:2E:CC:12:F6:53:C7:1A:B3:54:4F:CB:B0:75:62:0C:72
Extensions:
Type: 23 (0x0017); /non-TLS-1.3/
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x1418F0234083AB8DA99BA45AFDA51A6987AAEA0300AE7FAC40FB213536B37324BEEC9FBF25B2ABF8FADB796FF999265C
y = 0x53787E82470A2051E66ABC7E2F3C636302698C3A3FAD5BF9C036ADF81C23366FEA2C2CE8A4B09E60C859ACF01FBB557C
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
Type: 35 (0x0023); /non-TLS-1.3/
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 11 (0x000B); /non-TLS-1.3/
01:00
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1302 (TLS_AES_256_GCM_SHA384)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: 0B:B2:37:E0:44:70:25:C4:D9:49:9E:16:8F:B5:F7:C4:2E:CC:12:F6:53:C7:1A:B3:54:4F:CB:B0:75:62:0C:72
Extensions:
Type: 51 (0x0033); "key_share"
Secp384r1 (0x0018)
x = 0x884DFC0FE9602539133D59E3779E9DE8644D3532211C1061EFD16D15BE349D6723496325775E87CF3D396F1C02FCC5CF
y = 0x063315C18E34D26B9085A96A495F17B8557DB379DB6ABED0788C60417FCE917ADD8976BB955D9E7E1B1CC6C06F577280
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 3889
[...] /skipped 3889 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 107
05:03:00:67:30:65:02:30:78:D0:BD:10:8D:CD:57:22:BE:DF:2C:63:76:73:91:4A:1A:10:5B:B0:83:AC:B9:2D
81:EA:0C:2C:42:DF:2F:CE:C3:00:07:ED:D4:3A:6E:0D:91:4F:56:6D:FC:DE:6A:22:02:31:00:D4:8D:1B:05:D7
65:9E:CB:84:F8:D1:ED:9D:68:4A:B0:AB:62:9E:08:EB:3F:AE:F7:4C:81:0A:6D:9D:4B:B3:51:FF:85:7A:20:1B
8B:EC:DC:33:9E:F6:3A:72:86:B8:AF
Type: 20 (0x14) - "finished"
Length (octets, dec.): 48
DD:79:9C:BC:FB:F9:DE:93:A2:71:7E:46:DF:D6:84:3D:75:0E:5B:3B:BC:A4:7B:EC:7E:A6:3B:CF:46:42:8C:AA
5A:4F:E7:C2:79:F7:A2:72:1C:26:86:83:BB:B0:B3:8D
CLIENT_FINISHED (received)
Finished value: 0x76A6AA33DFD0BBFBA519E2390190CEF2C663DFF7C970CF68B3875B2277160F9404D5619E820910D024B770411A60B971
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.21:25308; timestamp: 1749895553
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 303ms; ServerHello sent: 154ms (including HelloRetryRequest time); TLS connection established: 302ms.