SSL Certificate Analysis for anthem.com - Security Grade & TLS Configuration

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Open Cached · just now

89/100 SECURITY SCORE

Certificate Information

Subject

C=US, ST=Indiana, O=Elevance Health, Inc., CN=www.anthem.com

Issuer

C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R40

Valid From

October 23, 2025

Valid Until

October 23, 2026 297 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

CF:5B:5C:F7:AC:46:30:CF:4B:7F:DB:95:4B:9D:8B:22:86:96:34:BD:47:AF:64:4A:7A:6D:98:B7:DE:2C:CF:A4

Alternative Names

169 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Configured (Restricts certificate issuance)

Current Issuer

Authorized (Matches CAA policy)

Authorized CAs

digicert.com entrust.net symantec.com sectigo.com

Recommendations

• Consider using critical flag (flags=128) for stricter CAA enforcement
• You have authorized 4 CAs - consider limiting to only the CAs you actively use
• Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
• Consider adding 'issuewild' records to control wildcard certificate issuance

Subject Alternative Names

169 domains

anthem.com www-origin-dr.anthem.com www-origin-dr.static-anthem.com www-origin.anthem.com www-origin.static-anthem.com www.anthem.com www.static-anthem.com consumerpublic.awse1.anthem.com consumerpublic.dr.awse2.anthem.com consumerpublic.dr1.awse2.anthem.com consumerpublic.dr2.awse2.anthem.com consumerpublic.dr3.awse2.anthem.com consumerpublic.prod.va.anthem.com consumerpublic.prod1.awse1.anthem.com consumerpublic.prod2.awse1.anthem.com consumerpublic.prod3.awse1.anthem.com

Other domains in certificate

bcbsdirect.com consumerpublic.awse1.bcbsdirect.com consumerpublic.dr.awse2.bcbsdirect.com consumerpublic.dr1.awse2.bcbsdirect.com consumerpublic.dr2.awse2.bcbsdirect.com consumerpublic.dr3.awse2.bcbsdirect.com consumerpublic.prod1.awse1.bcbsdirect.com consumerpublic.prod2.awse1.bcbsdirect.com consumerpublic.prod3.awse1.bcbsdirect.com www-origin-dr.bcbsdirect.com www-origin.bcbsdirect.com www.bcbsdirect.com

bluemedadv.com consumerpublic.awse1.bluemedadv.com consumerpublic.dr.awse2.bluemedadv.com consumerpublic.dr1.awse2.bluemedadv.com consumerpublic.dr2.awse2.bluemedadv.com consumerpublic.dr3.awse2.bluemedadv.com consumerpublic.prod.va.bluemedadv.com consumerpublic.prod1.awse1.bluemedadv.com consumerpublic.prod2.awse1.bluemedadv.com consumerpublic.prod3.awse1.bluemedadv.com www-origin-dr.bluemedadv.com www-origin.bluemedadv.com www.bluemedadv.com

bluemedadvgrhs.com consumerpublic.awse1.bluemedadvgrhs.com consumerpublic.dr.awse2.bluemedadvgrhs.com consumerpublic.dr1.awse2.bluemedadvgrhs.com consumerpublic.dr2.awse2.bluemedadvgrhs.com consumerpublic.dr3.awse2.bluemedadvgrhs.com consumerpublic.prod.va.bluemedadvgrhs.com consumerpublic.prod1.awse1.bluemedadvgrhs.com consumerpublic.prod2.awse1.bluemedadvgrhs.com consumerpublic.prod3.awse1.bluemedadvgrhs.com www-origin-dr.bluemedadvgrhs.com www-origin.bluemedadvgrhs.com www.bluemedadvgrhs.com

bluerxny.com consumerpublic.awse1.bluerxny.com consumerpublic.dr.awse2.bluerxny.com consumerpublic.dr1.awse2.bluerxny.com consumerpublic.dr2.awse2.bluerxny.com consumerpublic.dr3.awse2.bluerxny.com consumerpublic.prod.va.bluerxny.com consumerpublic.prod1.awse1.bluerxny.com consumerpublic.prod2.awse1.bluerxny.com consumerpublic.prod3.awse1.bluerxny.com www-origin-dr.bluerxny.com www-origin.bluerxny.com www.bluerxny.com

empireblue.com

consumerpublic.awse1.unicare.com consumerpublic.dr.awse2.unicare.com consumerpublic.dr1.awse2.unicare.com consumerpublic.dr2.awse2.unicare.com consumerpublic.dr3.awse2.unicare.com consumerpublic.prod1.awse1.unicare.com consumerpublic.prod2.awse1.unicare.com consumerpublic.prod3.awse1.unicare.com unicare.com www-origin-dr.unicare.com www-origin.unicare.com www.unicare.com

consumerpublic.awse1.unicaremass.com consumerpublic.dr.awse2.unicaremass.com consumerpublic.dr1.awse2.unicaremass.com consumerpublic.dr2.awse2.unicaremass.com consumerpublic.dr3.awse2.unicaremass.com consumerpublic.prod.va.unicaremass.com consumerpublic.prod1.awse1.unicaremass.com consumerpublic.prod2.awse1.unicaremass.com consumerpublic.prod3.awse1.unicaremass.com unicaremass.com www-origin-dr.unicaremass.com www-origin.unicaremass.com www.unicaremass.com

consumerpublic.awse1.wellpoint.com consumerpublic.dr.awse2.wellpoint.com consumerpublic.dr1.awse2.wellpoint.com consumerpublic.dr2.awse2.wellpoint.com consumerpublic.dr3.awse2.wellpoint.com consumerpublic.prod.va.wellpoint.com consumerpublic.prod1.awse1.wellpoint.com consumerpublic.prod2.awse1.wellpoint.com consumerpublic.prod3.awse1.wellpoint.com wellpoint.com www-origin-dr.wellpoint.com www-origin.wellpoint.com www.wellpoint.com