77/100 SECURITY SCORE

Certificate Information

Subject
CN=biqoe.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 29, 2025
Valid Until
March 29, 2026 65 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E4:9A:21:CF:A2:9A:B2:AE:EF:96:03:40:A6:41:E1:EB:0D:41:2C:0A:1E:F1:B9:1B:1E:A0:66:B4:38:F8:FD:30
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
status.bay.security

Other domains in certificate

akokomarket.com
report.alinocam.com
www.amplifypcr.com
www.artlas.online
www.aytech.com.br
www.badomimarlik.com
links.barbaova.com
becki.com.br
biqoe.com
bnu-qr.online
web.bqstar.com
brandupfilm.pl
brewiq.app
brewkin.app
admin.chillersmarket.com
console.docassist.cloudmetica.com docassist.cloudmetica.com
convo.code19.dev
devidukaveesha.d-kode.com.lk oshadhiuthpala.d-kode.com.lk
aocl.com.sg
mahirbayram.com.tr
nbs.lyib.com.tw
auth.commonquant.ai
controlsm.com
staging-dashboard.dairect.eu
doceriatonani.com.br
www.dominiumconsultancy.com
english.stage.doodlelearning.com
dustmodebros.me
eme-lab.com
vendors-admin.enchantchristmas.com
enhancedds.com
www.etpservice.com
maps.evsy.app
farmstart.kr
tdk-thanglong.fastvalue.vn
monitoro.fidelize.com.br
fkstores.online
www.fosautomations.com
crave4desserts.goeatnow.co.uk
groupe-sedda.fr
captainslog.hotchkiss.app
www.humanpoint.org
portal.hv-kujadt-fuchs.de
auth.i-find.ca
lethithaovan.id.vn thnm.id.vn
omahaelite.impactwrap.com
bi.staffrh.inf.br
academia.it.kr
www.jjscoffeeexperts.com
terms.kahero.co
salem.kishoredroptaxi.com
v18.koobiq.io
kredey.com
learnfrenchceline.com
lemaire31.com
dmxs.lentakveci.eu
lespitxus.com
lexisark.com
lotopremiun.live
integration.loupethis.com
www.mgltown.mn
mijnnoodpakket72.nl
mitybostreneris.lt
app.diarsipin.my.id
namoka.in
portum.kwaz.net.ar
impostor.nosuid.com
nudge.contact
admin.onlymego.cz
tender.openglass.co
portal.npoalpen.or.jp
www.orthoenergie.com
www.pureiptv.live
planner.pwnhyo.kr
www.ramashipping-portal.nl
www.recafe.in
reluctantapostate.com
rtnews.site
auth.serialclaim.com
ecom.staging.siggraph.io
dothething.silentbyte.com
ambient.soeren-jahns.de
sonasuntech.com
frontend.doe-maar-mee.spo.show
www.summonjob.com
nonprod.tamayo.fr tamayo.fr
tarangdonga.com www.tarangdonga.com
tgcmech.co.uk
sop.themaque.com
totalitycorp.com
bestellen.tuerkiyem-grill.de
vipsorteosrd.com
vmsconsultix.com
invite-qat.wemoscooter.com