Sent TLS Record
Header:
  Version = TLS 1.0 (0x301)
  Content Type = Handshake (22)
  Length = 999
    ClientHello, Length=995
      client_version=0x303 (TLS 1.2)
      Random:
        gmt_unix_time=0x6B8ABFBC
        random_bytes (len=28): B6FF5B16DA6DFBB1C3B12274ECC9497BB1B8295A17639176783FE132
      session_id (len=32): 1A1AA54104F0CBD3E06F0101752DD8542754757EC3AFEC06244482C77CCA8B30
      cipher_suites (len=2)
        {0x13, 0x01} TLS_AES_128_GCM_SHA256
      compression_methods (len=1)
        No Compression (0x00)
      extensions, length = 920
        extension_type=ec_point_formats(11), length=4
          uncompressed (0)
          ansiX962_compressed_prime (1)
          ansiX962_compressed_char2 (2)
        extension_type=supported_groups(10), length=20
          MLKEM512 (512)
          MLKEM768 (513)
          MLKEM1024 (514)
          X25519MLKEM768 (4588)
          SecP256r1MLKEM768 (4587)
          SecP384r1MLKEM1024 (4589)
          secp521r1 (P-521) (25)
          secp384r1 (P-384) (24)
          secp256r1 (P-256) (23)
        extension_type=session_ticket(35), length=0
        extension_type=encrypt_then_mac(22), length=0
        extension_type=extended_master_secret(23), length=0
        extension_type=signature_algorithms(13), length=42
          mldsa65 (0x0905)
          mldsa87 (0x0906)
          mldsa44 (0x0904)
          ecdsa_secp256r1_sha256 (0x0403)
          ecdsa_secp384r1_sha384 (0x0503)
          ecdsa_secp521r1_sha512 (0x0603)
          ed25519 (0x0807)
          ed448 (0x0808)
          ecdsa_brainpoolP256r1tls13_sha256 (0x081a)
          ecdsa_brainpoolP384r1tls13_sha384 (0x081b)
          ecdsa_brainpoolP512r1tls13_sha512 (0x081c)
          rsa_pss_pss_sha256 (0x0809)
          rsa_pss_pss_sha384 (0x080a)
          rsa_pss_pss_sha512 (0x080b)
          rsa_pss_rsae_sha256 (0x0804)
          rsa_pss_rsae_sha384 (0x0805)
          rsa_pss_rsae_sha512 (0x0806)
          rsa_pkcs1_sha256 (0x0401)
          rsa_pkcs1_sha384 (0x0501)
          rsa_pkcs1_sha512 (0x0601)
        extension_type=supported_versions(43), length=3
          TLS 1.3 (772)
        extension_type=psk_key_exchange_modes(45), length=2
          psk_dhe_ke (1)
        extension_type=key_share(51), length=806
            NamedGroup: MLKEM512 (512)
            key_exchange:  (len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
        extension_type=compress_certificate(27), length=3
          zlib (1)

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = Handshake (22)
  Length = 858
    ServerHello, Length=854
      server_version=0x303 (TLS 1.2)
      Random:
        gmt_unix_time=0x36E71BE5
        random_bytes (len=28): D0212BA09C829E7A5AF174F59D08F3755825C117757ADF137964048C
      session_id (len=32): 1A1AA54104F0CBD3E06F0101752DD8542754757EC3AFEC06244482C77CCA8B30
      cipher_suite {0x13, 0x01} TLS_AES_128_GCM_SHA256
      compression_method: No Compression (0x00)
      extensions, length = 782
        extension_type=supported_versions(43), length=2
            TLS 1.3 (772)
        extension_type=key_share(51), length=772
            NamedGroup: MLKEM512 (512)
            key_exchange:  (len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

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ChangeCipherSpec (20)
  Length = 1
    change_cipher_spec (1)

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 23
  Inner Content Type = Handshake (22)
    EncryptedExtensions, Length=2
      No extensions

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 839
  Inner Content Type = Handshake (22)
    Certificate, Length=818
      context (len=0): 
      certificate_list, length=814
        ASN.1Cert, length=809
------details-----
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Root CA
        Validity
            Not Before: Jan 14 22:29:46 2016 GMT
            Not After : Jan 15 22:29:46 2116 GMT
        Subject: CN = server.example
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:60:6a:df:fc:61:ee:48:aa:8c:11:48:43:
                    a5:6d:b6:52:5d:aa:98:49:b1:61:92:35:b1:fc:3a:
                    04:25:0c:6d:79:ff:b4:d5:c9:e9:5c:1c:3b:e0:ab:
                    b3:b8:7d:a3:de:6d:bd:e0:dd:d7:5a:bf:14:47:11:
                    42:5e:a6:82:d0:61:c1:7f:dd:13:46:e6:09:85:07:
                    0e:f2:d4:fc:1a:64:d2:0a:ad:20:ab:20:6b:96:f0:
                    ad:cc:c4:19:53:55:dc:01:1d:a4:b3:ef:8a:b4:49:
                    53:5d:8a:05:1c:f1:dc:e1:44:bf:c5:d7:e2:77:19:
                    57:5c:97:0b:75:ee:88:43:71:0f:ca:6c:c1:b4:b2:
                    50:a7:77:46:6c:58:0f:11:bf:f1:76:24:5a:ae:39:
                    42:b7:51:67:29:e1:d0:55:30:6f:17:e4:91:ea:ad:
                    f8:28:c2:43:6f:a2:64:a9:fb:9d:98:92:62:48:3e:
                    eb:0d:4f:82:4a:8a:ff:3f:72:ee:96:b5:ae:a1:c1:
                    98:ba:ef:7d:90:75:6d:ff:5a:52:9e:ab:f5:c0:7e:
                    d0:87:43:db:85:07:07:0f:7d:38:7a:fd:d1:d3:ee:
                    65:1d:d3:ea:39:6a:87:37:ee:4a:d3:e0:0d:6e:f5:
                    70:ac:c2:bd:f1:6e:f3:92:95:5e:a9:f0:a1:65:95:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:E7:84:BF:E8:59:27:33:10:B0:52:4F:51:52:2F:06:D6:C0:7A:CD
            X509v3 Authority Key Identifier: 
                70:7F:2E:AE:83:68:59:98:04:23:2A:CD:EB:3E:17:CD:24:DD:01:49
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Subject Alternative Name: 
                DNS:server.example
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7b:d3:04:43:75:8a:0f:11:ae:c4:fb:d7:a1:a2:9e:fe:20:18:
        d5:f4:2f:31:88:46:b6:75:8c:ee:e5:9b:97:a6:b9:a3:cd:60:
        9a:46:c3:48:97:e5:97:68:f7:5a:86:35:73:d9:69:9e:f9:5f:
        74:b9:e6:94:13:01:cb:6a:dc:e3:c4:04:e9:65:da:9c:a4:8b:
        28:f3:f9:9a:7f:bf:97:1f:45:92:e5:05:b1:56:e6:0b:f6:47:
        de:1e:89:b6:2b:e1:4d:df:4a:7e:01:d3:23:dc:97:8c:47:fe:
        5f:c7:cc:98:46:0e:c4:83:5b:ca:8a:f1:52:09:be:6b:ec:3f:
        09:8b:d0:93:02:bf:e1:51:e7:d1:7e:34:56:19:74:d0:ff:28:
        25:de:b7:9f:56:52:91:7d:20:29:85:0a:80:44:5f:71:32:25:
        71:0f:c2:16:e2:5f:6b:1d:3f:32:5b:0a:3c:74:1c:b9:62:f1:
        ed:07:50:a3:6d:b4:b4:31:0a:c0:53:44:6a:3a:88:84:8b:2d:
        a9:b0:37:8e:e6:18:36:bd:9a:20:40:0f:01:92:8b:3d:aa:61:
        e7:ae:2c:ed:36:cd:3a:07:86:74:3a:29:b3:d7:3a:b4:00:a9:
        c2:f5:92:78:0e:e2:0f:a3:fe:bb:be:e0:06:53:84:59:1d:90:
        69:e5:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
------------------
        No extensions

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 281
  Inner Content Type = Handshake (22)
    CertificateVerify, Length=260
      Signature Algorithm: rsa_pss_rsae_sha256 (0x0804)
      Signature (len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

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 53
  Inner Content Type = Handshake (22)
    Finished, Length=32
      verify_data (len=32): 129DAB78D81230E66E5A09422C6A235CF441ECF474BA76647B31E05BD146B2B7

Sent TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ChangeCipherSpec (20)
  Length = 1
    change_cipher_spec (1)

Sent TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 53
  Inner Content Type = Handshake (22)
    Finished, Length=32
      verify_data (len=32): A1804358E4D385E89B3B8CC7EF864A8E07E448DD8F925710A4FE0C26F1B68019

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 234
  Inner Content Type = Handshake (22)
    NewSessionTicket, Length=213
        ticket_lifetime_hint=7200
        ticket_age_add=564129016
        ticket_nonce (len=8): 0000000000000000
        ticket (len=192): B318156F9196D300C83F7CBD7DBE2F3D69984FE44D4D9C074472C01BB13814A3C4FA57CAFFEE87629C754B46F7E14819A210D91F719E7C47102BBF739C28A3D30AE286EFA533A8D6C75EA49F54156678ED67AE1E3E5F3B1A2DB24BE8C700920E4FAB13E32728584DE54F156EF98495E16C47A1A363C611AE219CA3D81EC551FF6932C2C65A04809873A96BC321200E3F739113D3E8D9E238452009C64AA7A614E3FA9668FF1432837762E7B2A35A295630294698F1D84FFE4EEF9B608650561D
        No extensions

Received TLS Record
Header:
  Version = TLS 1.2 (0x303)
  Content Type = ApplicationData (23)
  Length = 234
  Inner Content Type = Handshake (22)
    NewSessionTicket, Length=213
        ticket_lifetime_hint=7200
        ticket_age_add=2602834439
        ticket_nonce (len=8): 0000000000000001
        ticket (len=192): B318156F9196D300C83F7CBD7DBE2F3D3884D7420D8DA6A9F129C53199C286852F0C89754EC05D13B8CFBD3FD6F72AB0B3A5AD2DD17B5770986C4CB3D2323F2CAD6C6DF3709185C8722D330886C202B7CC0CFC501130F486BAA6CE9A224FDB7A41CBF40D5AB37F2EC7B040C97F7DB498ABEB3750F7B3EA870EB7AD386AEB9217925D6369DD62E1B5EC8465C22B793C278120DED5CB9B89709EF795D6661E39084FAB0768D68F4091F2CE1E3A08B2219AD8DBAD868A067D48B1740435BDD9C09B
        No extensions

