00 05 - 0x5 (5) bytes of extension data follows
That line appears to be followed by four bytes. Am I missing something or is this a bug in the document? I hope it’s a bug in the document, so I can quip: Security is hard!
UPDATE: yeah it was a bug. https://github.com/syncsynchalt/illustrated-tls/issues/1