TLS 1.3: HKDF-Expand
As commented by Maarten Bodewes, derived secrects are not session keys. In TLS 1.3, a "derived secret" and a label are further fed into the HKDF.Expand function to generate the desired session/traffic key, secret nonce/IV, resumption key, etc. I think such an intermediate HKDF.Expand step makes a better key separation for security purpose, e.g., corrupting a traffic key intuitively leaks no information about a resumption key because they are not generated from the same "derived secret".

Btw, HKDF.Extract essentially converts a high-entropy input (not sampled from a uniform distribution), e.g., a DH result, to a fixed-length pseudorandom key, while HKDF.Expand takes a pseudorandom key and a label to generate a random string (which for example could be either a derived secret or a session key).