Direct TLS · Exact peer chain

what cert did you send?

This Go server owns your TLS handshake and asks for an optional client certificate without naming an acceptable CA.

Client certificateNONE

CA preferenceNONE

TLS connectionTLS 1.3 · h2

Connection

TLS version: TLS 1.3
Cipher: TLS_AES_128_GCM_SHA256
ALPN: h2
Session resumed: false
Chain fidelity: exact

Chain as sent

No client certificate was presented.Your browser may not have a client identity installed. Try curl --cert client-chain.pem --key client.key https://whatcert.ttl.one/json.

Fidelity note

The sequence above is exactly r.TLS.PeerCertificates. Validation may build a separate path, but never rewrites the chain-as-sent display.