DNS Gurus

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Unknown Certificate Authority - the server's certificate is not trusted

Cached · just now
85/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=Minnesota, O=UnitedHealth Group Inc., CN=dev-www.optum.com
Issuer
C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
Valid From
November 20, 2025
Valid Until
November 20, 2026 293 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3E:DD:44:C0:C0:12:7C:F9:AF:6C:B7:C3:8C:32:BF:C6:AD:4E:95:69:D2:89:02:12:B5:4B:AC:EA:0A:A6:56:00
Alternative Names
97 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31557600
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Significantly strengthen CSP directives
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

97 domains
dev-advantageplusnetwork.optum.com dev-bank.optum.com dev-br.optum.com dev-business.optum.com dev-campaign.optum.com dev-changehealtcare-au.optum.com dev-changehealtcare-ie.optum.com dev-changehealtcare-uk.optum.com dev-changehealthcare.optum.com dev-customerconnect.optum.com dev-divvydose.optum.com dev-dmp.optum.com dev-episource.optum.com dev-everettclinic.optum.com dev-frontiertherapies.optum.com dev-genoahealthcare.optum.com dev-globalmedicalservices.optum.com dev-healthybenefitsplus.optum.com dev-homeandcommunity.optum.com dev-housecallsvisit.optum.com dev-ibm.optum.com dev-ie.optum.com dev-ifmgipa.optum.com dev-illinoissmac.optum.com dev-in.optum.com dev-iowamedicaidpdl.optum.com dev-labs.optum.com dev-lp.optum.com dev-mainecarepdl.optum.com dev-medicalservices.optum.com dev-medicareandproviders.optum.com dev-medx.optum.com dev-my.optum.com dev-my5.optum.com dev-myaarphsa.optum.com dev-myhealthybenefitsplus.optum.com dev-namm.optum.com dev-njsul.optum.com dev-nuvaila.optum.com dev-o5.optum.com dev-optumhealthslco.optum.com dev-optumlabs.optum.com dev-papdl.optum.com dev-polyclinic.optum.com dev-promed.optum.com dev-prorx.optum.com dev-providerexpress.optum.com dev-rxssdc.optum.com dev-sma.optum.com dev-specialty.optum.com dev-tooele.optum.com dev-uhcathome.optum.com dev-uhcha.optum.com dev-uhchousecalls.optum.com dev-uhchousecallsvisit.optum.com dev-uhcra.optum.com dev-uk.optum.com dev-userguide.optum.com dev-usmd.optum.com dev-welcomechangehealthcare.optum.com dev-welcomewebsite.optum.com dev-workcompauto.optum.com dev-www.optum.com dev-wymedicaid.optum.com

Other domains in certificate

dev-www.healthybenefitsplus.com
dev-www.here4tn.com
dev-www.iadur.org
dev-www.myoptumfinancial.com
dev-www.nuvaila.uk
dev-imaging.optum.au
dev-imaging.optum.co.uk
dev-imaging.optum.ie
dev-www.optum.in dev.optum.in
dev-www.optumrx.com dev-www2.optumrx.com
dev-ahatpa-rxportal.sxc.com dev-amerihealth-rxportal.sxc.com dev-bcbsaz-rxportal.sxc.com dev-bcbsm-rxportal.sxc.com dev-bluelink-rxportal.sxc.com dev-humanaassociaterx-rxportal.sxc.com dev-ibx-rxportal.sxc.com dev-messa-rxportal.sxc.com dev-nextbluend-rxportal.sxc.com dev-pai-rxportal.sxc.com dev-pharmacy-rxportal.sxc.com dev-php-rxportal.sxc.com dev-quartz-rxportal.sxc.com dev-rxportal.sxc.com dev-serveyou-rxportal.sxc.com dev-vermontblueadvantage-rxportal.sxc.com dev-vermontbluerx-rxportal.sxc.com dev-wyoblueadvantage-rxportal.sxc.com
dev-csaaigbackpain.uhc.com dev-gem.uhc.com dev-ipghrhub.uhc.com