88/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=Rhode Island, L=Woonsocket, O=CVS Pharmacy Inc, CN=test-services.cvshealth.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
August 27, 2026
Valid Until
March 13, 2027 195 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F7:D9:80:A2:DA:D1:66:58:82:6D:49:8D:64:B1:79:82:63:4A:50:6C:B2:C8:2A:0A:B0:8D:81:BB:57:8D:D2:1D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000 ; includeSubDomains
Content-Security-Policy
Basic
default-src; script-src; frame-src; +1 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Present
SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Consider adding 'preload' to HSTS for maximum security
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

98 domains
preprod-info.caremark.com preprod.caremark.com

Other domains in certificate

preprod-care.cvs.com preprod.cvs.com
dev.cvsaco.com uat.cvsaco.com
dev1www.cvscare.com sit1www.cvscare.com sit2www.cvscare.com
apigee-sw-non-prod.cvshealth.com apigee-sw-prod.cvshealth.com bell-apis-dev.cvshealth.com bell-apis-pt.cvshealth.com bell-apis-qa.cvshealth.com bell-apis-uat.cvshealth.com brmuat.cvshealth.com ciam-monitoring-test.cvshealth.com dev1-api.cvshealth.com dev2-api.cvshealth.com dev3-api.cvshealth.com devportal-d8-dev.cvshealth.com devportal-d8-dev2.cvshealth.com devportal-d8-dev3.cvshealth.com devportal-d8-dev4.cvshealth.com devportal-d8-staging.cvshealth.com devportal-staging.cvshealth.com devportal-test.cvshealth.com ftd-securehub.cvshealth.com hearthaus-dev.cvshealth.com hearthaus-uat.cvshealth.com kiteworks-tst.cvshealth.com medguides-test.cvshealth.com metrics-sentryqa.cvshealth.com myac-pt.cvshealth.com mylife-pt.cvshealth.com payor-dev.cvshealth.com payor-stg.cvshealth.com pbmepicfhir-uat.cvshealth.com perf-api.cvshealth.com policy-test.cvshealth.com preprod-accessibility.cvshealth.com preprod-cmsservices.cvshealth.com preprod.cvshealth.com prev-cmsservices.cvshealth.com prev.cvshealth.com pt-metrics.cvshealth.com qa-cmsservices.cvshealth.com qa-dcl.cvshealth.com qa.cvshealth.com qaapi10a.cvshealth.com qaapih78.cvshealth.com retailepicfhir-uat.cvshealth.com sandbox-api.cvshealth.com sit-metrics.cvshealth.com sit1-api.cvshealth.com sit1ingeniorx.cvshealth.com sit1physicians.cvshealth.com sit1sdk.cvshealth.com sit1services.cvshealth.com sit2-api.cvshealth.com sit2ingeniorx.cvshealth.com sit2physicians.cvshealth.com sit2sdk.cvshealth.com sit2services.cvshealth.com sit3-api.cvshealth.com sit3ingeniorx.cvshealth.com sit3physicians.cvshealth.com sit3sdk.cvshealth.com staging-api.cvshealth.com states-uat.cvshealth.com static-assets-it.cvshealth.com static-assets-qa.cvshealth.com static-assets-reg.cvshealth.com static-assets-uat.cvshealth.com str-cmsservices.cvshealth.com str-dcl.cvshealth.com str.cvshealth.com test-services.cvshealth.com tririga-pt.cvshealth.com uatmftweb.cvshealth.com uipathapps-dev.cvshealth.com uipathapps-qa.cvshealth.com uipathapps-uat.cvshealth.com wfm-ltc-pt.cvshealth.com wfm-pt.cvshealth.com wfo-uat.cvshealth.com www-uat.cvshealth.com
preprod.cvsspecialty.com
dev1www.kineticrx.com dev2www.kineticrx.com dev3www.kineticrx.com sit1www.kineticrx.com sit2www.kineticrx.com
www-dev.medicaresupportcenter.com www-qa.medicaresupportcenter.com
preprod.rxsavingsplus.com sit1www.rxsavingsplus.com
preprod-info.silverscript.com