Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
C=US, ST=Rhode Island, L=Woonsocket, O=CVS Pharmacy Inc, CN=testwww.caremark.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
August 10, 2026
Valid Until
February 23, 2027
183 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
30:75:D1:B9:0E:38:28:C4:7D:BD:85:7F:36:5D:B6:D8:D5:6C:C8:46:BA:8F:4A:52:F1:97:D1:09:25:A8:B8:81
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
resource.cvscaremark.com
sit1requestcenter.cvscaremark.com
cteclient.caremark.com
etools-stage.caremark.com
icesit3w.caremark.com
icesit4w.caremark.com
icet-sit1.caremark.com
icet-sit2.caremark.com
icet-sit3.caremark.com
icet-sit4w.caremark.com
microstrategytest.caremark.com
preprod-business.caremark.com
prev-business.caremark.com
prev-info.caremark.com
ptpbmservices.caremark.com
ptphysicianservices.caremark.com
ptsdk.caremark.com
ptsdkservices.caremark.com
ptspecialtyservices.caremark.com
qa-business.caremark.com
sit-espanol.caremark.com
sit1-omniviewmobile.caremark.com
sit1client.caremark.com
sit1client85.caremark.com
sit1ds.caremark.com
sit1fast.caremark.com
sit1formularysearch85.caremark.com
sit1m.caremark.com
sit1pbmservices.caremark.com
sit1physicianservices.caremark.com
sit1rxnav.caremark.com
sit1sdk.caremark.com
sit1sdkservices.caremark.com
sit1specialtyservices.caremark.com
sit1www.caremark.com
sit2client.caremark.com
sit2client85.caremark.com
sit2ds.caremark.com
sit2fast.caremark.com
sit2formularysearch85.caremark.com
sit2m.caremark.com
sit2pbmservices.caremark.com
sit2physicianservices.caremark.com
sit2sdk.caremark.com
sit2sdkservices.caremark.com
sit2specialtyservices.caremark.com
sit2www.caremark.com
sit3client.caremark.com
sit3client85.caremark.com
sit3ds.caremark.com
sit3fast.caremark.com
sit3m.caremark.com
sit3pbmservices.caremark.com
sit3physicianservices.caremark.com
sit3sdk.caremark.com
sit3sdkservices.caremark.com
sit3specialtyservices.caremark.com
sit3www.caremark.com
sit4sdkservices.caremark.com
sit5sdkservices.caremark.com
sit6sdkservices.caremark.com
sitservices.caremark.com
stpwww.caremark.com
str-business.caremark.com
t-uat.caremark.com
testwww.caremark.com
uat-omniviewmobile.caremark.com
www-akatest.caremark.com
sit1www.cvscaremarkspecialtyrx.com
sit2www.cvscaremarkspecialtyrx.com
sit3www.cvscaremarkspecialtyrx.com
sit1ingeniorx.cvshealth.com
sit1physicians.cvshealth.com
sit2ingeniorx.cvshealth.com
sit2physicians.cvshealth.com
sit3ingeniorx.cvshealth.com
sit3physicians.cvshealth.com
devcentral.cvsspecialty.com
sit1central.cvsspecialty.com
sit1fast.cvsspecialty.com
sit1services.cvsspecialty.com
sit1www.cvsspecialty.com
sit2central.cvsspecialty.com
sit2fast.cvsspecialty.com
sit2services.cvsspecialty.com
sit2www.cvsspecialty.com
sit3central.cvsspecialty.com
sit3fast.cvsspecialty.com
sit3services.cvsspecialty.com
sit3www.cvsspecialty.com
sitcentral.cvsspecialty.com
sit1www.cvsspecialtyinsight.com
sit2www.cvsspecialtyinsight.com
sit3www.cvsspecialtyinsight.com
itools-sit1.manageyourpbm.com
itools-stage.manageyourpbm.com
sit1.manageyourpbm.com
sit1report.manageyourpbm.com
sit2.manageyourpbm.com
sit3.manageyourpbm.com
Other domains in certificate