JA4 t11d220700_6ef92d04e905_767e63493228

t11d220700_6ef92d04e905_767e63493228

Legacy TLS client — inferred from the JA4 handshake shape.

What this fingerprint encodes

Transport

TCP

TLS version

TLS 1.1

Server name

server name sent

Cipher suites offered

22

Extensions offered

7

ALPN

none offered

The hello it was computed from

Recovered because the proxy now stores the pre-hash JA3 string alongside the digest. Every number below came out of this client's ClientHello; anything we cannot name in the IANA registry is shown as its raw value rather than guessed at.

Version

TLS 1.1

Cipher suites 22

• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA
• 56 (0x0038)
• TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
• 135 (0x0087)
• 49177 (0xc019)
• 58 (0x003a)
• 137 (0x0089)
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA
• 50 (0x0032)
• TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
• 68 (0x0044)
• 49176 (0xc018)
• 52 (0x0034)
• 70 (0x0046)
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

Extensions 7

• renegotiation_info
• server_name
• ec_point_formats
• supported_groups
• session_ticket
• encrypt_then_mac
• extended_master_secret

Named groups 5

• x25519
• secp256r1
• x448
• secp384r1
• secp521r1

Point formats 3

• uncompressed
• ansiX962_compressed_prime
• ansiX962_compressed_char2

770,49162-49172-57-56-136-135-49177-58-137-49161-49171-51-50-69-68-49176-52-70-53-132-47-65,65281-0-11-10-35-22-23,29-23-30-24-25,0-1-2

Seen in live traffic

Connections

20

First seen

2026-10-06 22:44 UTC

Last seen

2026-10-07 00:12 UTC

Transport

TCP

This entry is an observation, not a policy decision. It is here because the edge saw it, not because anyone reviewed it, and it blocks nothing on its own. Only the curated tier drives classification and banning.