Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
C=US, ST=Rhode Island, L=Woonsocket, O=CVS Pharmacy Inc, CN=test-services.cvshealth.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
August 27, 2026
Valid Until
March 13, 2027
195 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F7:D9:80:A2:DA:D1:66:58:82:6D:49:8D:64:B1:79:82:63:4A:50:6C:B2:C8:2A:0A:B0:8D:81:BB:57:8D:D2:1D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31104000 ; includeSubDomains
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
98 domains
apigee-sw-non-prod.cvshealth.com
apigee-sw-prod.cvshealth.com
bell-apis-dev.cvshealth.com
bell-apis-pt.cvshealth.com
bell-apis-qa.cvshealth.com
bell-apis-uat.cvshealth.com
brmuat.cvshealth.com
ciam-monitoring-test.cvshealth.com
dev1-api.cvshealth.com
dev2-api.cvshealth.com
dev3-api.cvshealth.com
devportal-d8-dev.cvshealth.com
devportal-d8-dev2.cvshealth.com
devportal-d8-dev3.cvshealth.com
devportal-d8-dev4.cvshealth.com
devportal-d8-staging.cvshealth.com
devportal-staging.cvshealth.com
devportal-test.cvshealth.com
ftd-securehub.cvshealth.com
hearthaus-dev.cvshealth.com
hearthaus-uat.cvshealth.com
kiteworks-tst.cvshealth.com
medguides-test.cvshealth.com
metrics-sentryqa.cvshealth.com
myac-pt.cvshealth.com
mylife-pt.cvshealth.com
payor-dev.cvshealth.com
payor-stg.cvshealth.com
pbmepicfhir-uat.cvshealth.com
perf-api.cvshealth.com
policy-test.cvshealth.com
preprod-accessibility.cvshealth.com
preprod-cmsservices.cvshealth.com
preprod.cvshealth.com
prev-cmsservices.cvshealth.com
prev.cvshealth.com
pt-metrics.cvshealth.com
qa-cmsservices.cvshealth.com
qa-dcl.cvshealth.com
qa.cvshealth.com
qaapi10a.cvshealth.com
qaapih78.cvshealth.com
retailepicfhir-uat.cvshealth.com
sandbox-api.cvshealth.com
sit-metrics.cvshealth.com
sit1-api.cvshealth.com
sit1ingeniorx.cvshealth.com
sit1physicians.cvshealth.com
sit1sdk.cvshealth.com
sit1services.cvshealth.com
sit2-api.cvshealth.com
sit2ingeniorx.cvshealth.com
sit2physicians.cvshealth.com
sit2sdk.cvshealth.com
sit2services.cvshealth.com
sit3-api.cvshealth.com
sit3ingeniorx.cvshealth.com
sit3physicians.cvshealth.com
sit3sdk.cvshealth.com
staging-api.cvshealth.com
states-uat.cvshealth.com
static-assets-it.cvshealth.com
static-assets-qa.cvshealth.com
static-assets-reg.cvshealth.com
static-assets-uat.cvshealth.com
str-cmsservices.cvshealth.com
str-dcl.cvshealth.com
str.cvshealth.com
test-services.cvshealth.com
tririga-pt.cvshealth.com
uatmftweb.cvshealth.com
uipathapps-dev.cvshealth.com
uipathapps-qa.cvshealth.com
uipathapps-uat.cvshealth.com
wfm-ltc-pt.cvshealth.com
wfm-pt.cvshealth.com
wfo-uat.cvshealth.com
www-uat.cvshealth.com
preprod-info.caremark.com
preprod.caremark.com
preprod-care.cvs.com
preprod.cvs.com
dev.cvsaco.com
uat.cvsaco.com
dev1www.cvscare.com
sit1www.cvscare.com
sit2www.cvscare.com
preprod.cvsspecialty.com
dev1www.kineticrx.com
dev2www.kineticrx.com
dev3www.kineticrx.com
sit1www.kineticrx.com
sit2www.kineticrx.com
www-dev.medicaresupportcenter.com
www-qa.medicaresupportcenter.com
preprod.rxsavingsplus.com
sit1www.rxsavingsplus.com
preprod-info.silverscript.com
Other domains in certificate