Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
C=US, ST=Rhode Island, L=Woonsocket, O=CVS Pharmacy Inc, CN=test-services.cvshealth.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
December 03, 2025
Valid Until
December 01, 2026
97 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
39:81:20:36:A3:5E:E7:98:02:E1:8C:60:60:AC:B0:48:0F:7C:C0:D9:60:F9:3A:F3:0F:32:B5:E3:C2:2A:E2:4B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31104000 ; includeSubDomains
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
98 domains
dev1www.cvscare.com
sit1www.cvscare.com
sit2www.cvscare.com
preprod-info.caremark.com
preprod.caremark.com
preprod-care.cvs.com
preprod.cvs.com
dev.cvsaco.com
uat.cvsaco.com
apigee-sw-non-prod.cvshealth.com
apigee-sw-prod.cvshealth.com
bell-apis-dev.cvshealth.com
bell-apis-pt.cvshealth.com
bell-apis-qa.cvshealth.com
bell-apis-uat.cvshealth.com
brmuat.cvshealth.com
ciam-monitoring-test.cvshealth.com
dev1-api.cvshealth.com
dev2-api.cvshealth.com
dev3-api.cvshealth.com
devportal-d8-dev.cvshealth.com
devportal-d8-dev2.cvshealth.com
devportal-d8-dev3.cvshealth.com
devportal-d8-dev4.cvshealth.com
devportal-d8-staging.cvshealth.com
devportal-staging.cvshealth.com
devportal-test.cvshealth.com
ftd-securehub.cvshealth.com
hearthaus-dev.cvshealth.com
hearthaus-uat.cvshealth.com
kiteworks-tst.cvshealth.com
medguides-test.cvshealth.com
metrics-sentryqa.cvshealth.com
myac-pt.cvshealth.com
mylife-pt.cvshealth.com
payor-dev.cvshealth.com
payor-stg.cvshealth.com
pbmepicfhir-uat.cvshealth.com
perf-api.cvshealth.com
policy-test.cvshealth.com
preprod-accessibility.cvshealth.com
preprod-cmsservices.cvshealth.com
preprod.cvshealth.com
prev-cmsservices.cvshealth.com
prev.cvshealth.com
pt-metrics.cvshealth.com
qa-cmsservices.cvshealth.com
qa-dcl.cvshealth.com
qa.cvshealth.com
qaapi10a.cvshealth.com
qaapih78.cvshealth.com
retailepicfhir-uat.cvshealth.com
sandbox-api.cvshealth.com
sit-metrics.cvshealth.com
sit1-api.cvshealth.com
sit1ingeniorx.cvshealth.com
sit1physicians.cvshealth.com
sit1sdk.cvshealth.com
sit1services.cvshealth.com
sit2-api.cvshealth.com
sit2ingeniorx.cvshealth.com
sit2physicians.cvshealth.com
sit2sdk.cvshealth.com
sit2services.cvshealth.com
sit3-api.cvshealth.com
sit3ingeniorx.cvshealth.com
sit3physicians.cvshealth.com
sit3sdk.cvshealth.com
staging-api.cvshealth.com
states-uat.cvshealth.com
static-assets-it.cvshealth.com
static-assets-qa.cvshealth.com
static-assets-reg.cvshealth.com
static-assets-uat.cvshealth.com
str-cmsservices.cvshealth.com
str-dcl.cvshealth.com
str.cvshealth.com
test-services.cvshealth.com
tririga-pt.cvshealth.com
uatmftweb.cvshealth.com
uipathapps-dev.cvshealth.com
uipathapps-qa.cvshealth.com
uipathapps-uat.cvshealth.com
wfm-ltc-pt.cvshealth.com
wfm-pt.cvshealth.com
wfo-uat.cvshealth.com
www-uat.cvshealth.com
preprod.cvsspecialty.com
dev1www.kineticrx.com
dev2www.kineticrx.com
dev3www.kineticrx.com
sit1www.kineticrx.com
sit2www.kineticrx.com
www-dev.medicaresupportcenter.com
www-qa.medicaresupportcenter.com
preprod.rxsavingsplus.com
sit1www.rxsavingsplus.com
preprod-info.silverscript.com
Other domains in certificate