40de77218bd98b92

// import tls "github.com/refraction-networking/utls"
tcpConn, err := net.Dial("tcp", "tlsfingerprint.io:443")
if err != nil {
	fmt.Printf("net.Dial() failed: %+v\n", err)
	return
}

config := tls.Config{ServerName: "tlsfingerprint.io"}
// This fingerprint includes feature(s), not fully supported by TLS.
// uTLS client with this fingerprint will only be able to to talk to servers,
// that also do not support those features. 
tlsConn := tls.Client(tcpConn, &tlsConfig, utls.HelloCustom)
clientHelloSpec := tls.ClientHelloSpec {
	CipherSuites: []uint16{
		tls.TLS_AES_256_GCM_SHA384,
	},
	CompressionMethods: []byte{
		0x00, // compressionNone
	},
	Extensions: []tls.TLSExtension{
		&tls.SNIExtension{},
		&tls.StatusRequestExtension{},
		&tls.SupportedCurvesExtension{[]tls.CurveID{
			tls.X25519,
		}},
		&tls.SupportedPointsExtension{SupportedPoints: []byte{
			0x00, // pointFormatUncompressed
		}},
		&tls.SignatureAlgorithmsExtension{SupportedSignatureAlgorithms: []SignatureScheme{
			tls.PSSWithSHA256,
			tls.PKCS1WithSHA256,
			tls.ECDSAWithP256AndSHA256,
			tls.PSSWithSHA384,
			tls.PKCS1WithSHA384,
			tls.ECDSAWithP384AndSHA384,
			tls.PSSWithSHA512,
			tls.PKCS1WithSHA512,
			tls.ECDSAWithP521AndSHA512,
			tls.PKCS1WithSHA1,
			tls.ECDSAWithSHA1,
		},},
		&tls.RenegotiationInfoExtension{renegotiation: tls.RenegotiateOnceAsClient},
		&tls.SCTExtension{},
		&tls.GenericExtension {id: 0x0028}, // WARNING: UNKNOWN EXTENSION, USE AT YOUR OWN RISK
		&tls.KeyShareExtension{[]tls.KeyShare{
			{Group: tls.X25519},
		}},
		&tls.SupportedVersionsExtension{[]uint16{
			tls.VersionTLS13,
			0x7f1c,
			0x7f1b,
			0x7f1a,
			0x7f19,
			0x7f18,
			0x7f17,
			0x7f16,
			0x7f15,
			0x7f14,
			0x7f13,
			0x7f12,
			tls.VersionTLS12,
			tls.VersionTLS11,
			tls.VersionTLS10,
			tls.VersionSSL30,
		}},
		&tls.PSKKeyExchangeModesExtension{[]uint8{
			tls.PskModePlain,
			tls.PskModeDHE,
		}},
		&tls.GenericExtension {id: 0x0029}, // WARNING: UNKNOWN EXTENSION, USE AT YOUR OWN RISK
	},
}
tlsConn.ApplyPreset(clientHelloSpec)
        
n, err = tlsConn.Write("Hello, World!")
// or tlsConn.Handshake() for better control