Open
Cached
·
just now
95/100
SECURITY SCORE
Certificate Information
Subject
CN=www.airnewzealand.co.nz
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M04
Valid From
November 19, 2025
Valid Until
December 18, 2026
393 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BB:61:B9:27:15:54:F5:83:0B:B7:91:E5:7D:73:D3:87:69:6D:8B:FC:78:28:DD:25:46:DD:2A:BC:09:9B:30:B9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains;
Content-Security-Policy
Basic
block-all-mixed-content; default-src; base-uri; +12 more
block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.jp flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.cn flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.eu flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.kr flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.grabaseat.co.nz govtbookings.airnewzealand.co.nz au-connect.authsignal.com auth.identity.airnewzealand.com auth.identity.qual.airnewzealand.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com; script-src 'self' p-airnz.com 'unsafe-inline' 'unsafe-eval' flightbookings.airnewzealand.eu res.levexis.com *.demdex.net oc-cdn-public-oce.azureedge.net https://unpkg.com/[email protected]/dist/chat-adapter.js www.googleadservices.com www.google.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com www.google-analytics.com analytics.google.com tagmanager.google.com *.doubleclick.net static.hotjar.com script.hotjar.com https://widget.timatic.iata.org/scripts/iata-timatic-widget-live.js md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au cdn-au.onetrust.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com upgrade.plusgrade.com s.swiftypecdn.com player.vimeo.com s.wayin.com xd.wayin.com x.wayin.com eu-x.wayin.com s.engagesciences.com display.engagesciences.com display.wayin.com yourir.info www.youtube.com s.ytimg.com; style-src 'unsafe-inline' p-airnz.com 'self' oc-cdn-public-oce.azureedge.net fonts.googleapis.com tagmanager.google.com static.hotjar.com script.hotjar.com upgrade-cdn-prd.plusgrade.com upgrade-prod-cdn.plusgrade.com s.swiftypecdn.com yourir.info; img-src https: data: blob: ad.doubleclick.net ade.googlesyndication.com adservice.google.com www.googletagmanager.com www.google.com static.hotjar.com script.hotjar.com *.kampyle.com i.vimeocdn.com i.ytimg.com; font-src p-airnz.com 'self' *.cdn.office.net fonts.googleapis.com fonts.gstatic.com script.hotjar.com data: dhm5hy2vn8l0l.cloudfront.net; media-src 'self' p-airnz.com data: video.cdnvue.com; frame-src 'self' *.demdex.net au-connect.authsignal.com auth.identity.airnewzealand.com identity.airnewzealand.com airnz-cargo.chooose.today airnz-corporate.chooose.today forms.cd.airnewzealand.co.nz sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com oc-cdn-public-oce.azureedge.net blob: comms.omnichannelengagementhub.com customervoice.microsoft.com www.googletagmanager.com td.doubleclick.net *.google.com *.doubleclick.net vars.hotjar.com nebula-cdn.kampyle.com www.airnewzealand.co.nz/airpoints-account/payments/scripts/done.html www.airnewzealand.co.nz/payment/scripts/done.html *.cdn-pci.optimizely.com nz.fltmaps.com v.qq.com player.vimeo.com xd.wayin.com x.wayin.com eu-x.wayin.com display.engagesciences.com airnz.wufoo.com player.youku.com www.youtube.com; worker-src blob:; connect-src 'self' api.airnz.io api.airnz.ai p-airnz.com *.demdex.net *.tt.omtrdc.net identity.airnewzealand.com sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com unq0355446423e84eb397bc71189d78d-crm6.omnichannelengagementhub.com browser.pipe.aria.microsoft.com *.omnichannelengagementhub.com *.au.omnichannelengagementhub.com https://*.trouter.skype.com wss://*.trouter.skype.com edge.skype.com *.communication.azure.com ocsdk-prod.azureedge.net blob: pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com ad.doubleclick.net *.googleapis.com *.google.com *.gstatic.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.timatic.iata.org/api/ md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au cdn-au.onetrust.com geolocation.onetrust.com privacyportal-au.onetrust.com *.optimizely.com https://*.sentry.io s.swiftypecdn.com search-api.swiftype.com yourir.info; object-src 'none'; frame-ancestors 'self'; report-uri /csp-report
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
geolocation=(self "https://p-airnz.com"), camera=(), fullscreen=(self "https://www.youtube.com"), accelerometer=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), sync-xhr=(*), usb=(), web-share=(self), clipboard-read=(), clipboard-write=()
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 4 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
97 domains
airnewzealand.fr
campervans.airnewzealand.fr
flightbookings.airnewzealand.fr
www.airnewzealand.fr
www.airnewzealand.co.nz
campervans.airnewzealand.de
flightbookings.airnewzealand.de
fly.airnewzealand.de
www.airnewzealand.de
airnewzealand.es
www.airnewzealand.es
airnewzealand.eu
auth.airnewzealand.eu
carbonoffset.airnewzealand.eu
flightbookings.airnewzealand.eu
hotels.airnewzealand.eu
qual-flightbookings.airnewzealand.eu
www.campervans.airnewzealand.eu
airnewzealand.gr
www.airnewzealand.gr
airnewzealand.hk
auth.airnewzealand.hk
flightbookings.airnewzealand.hk
hotels.airnewzealand.hk
airnewzealand.id
www.airnewzealand.id
airnewzealand.ie
www.airnewzealand.ie
airnewzealand.in
www.airnewzealand.in
airnewzealand.it
www.airnewzealand.it
airnewzealand.jp
auth.airnewzealand.jp
betterwaytofly.airnewzealand.jp
beyond.airnewzealand.jp
flightbookings.airnewzealand.jp
great-newzealand.airnewzealand.jp
hotels.airnewzealand.jp
islands.airnewzealand.jp
jiyu.airnewzealand.jp
kix.airnewzealand.jp
nz-campaign.airnewzealand.jp
nzzz.airnewzealand.jp
www.betterwaytofly.airnewzealand.jp
www.beyond.airnewzealand.jp
www.campervans.airnewzealand.jp
www.great-newzealand.airnewzealand.jp
www.islands.airnewzealand.jp
www.jiyu.airnewzealand.jp
www.kix.airnewzealand.jp
www.nz-campaign.airnewzealand.jp
airnewzealandholidays.eu
www.airnewzealandholidays.eu
airnewzealandtrade.de
www.airnewzealandtrade.de
airnz.es
www.airnz.es
airnz.eu
m.airnz.eu
www.airnz.eu
airnz.hk
m.airnz.hk
www.airnz.hk
airnz.in
www.airnz.in
airnz.it
www.airnz.it
airnzagent.eu
www.airnzagent.eu
airnzagent.hk
airnewzealand.co.id
airnz.co.id
www.airnewzealand.co.id
www.airnz.co.id
airnewzealand.co.in
airnz.co.in
airnzagent.co.in
www.airnewzealand.co.in
www.airnz.co.in
www.airnzagent.co.in
airnewzealand.com.es
airnz.com.es
www.airnewzealand.com.es
www.airnz.com.es
airnz.com.fr
www.airnz.com.fr
airnewzealand.com.gr
www.airnewzealand.com.gr
airnewzealand.com.hk
airnz.com.hk
auth.airnewzealand.com.hk
carbonoffset.airnewzealand.com.hk
flightbookings.airnewzealand.com.hk
m.airnz.com.hk
qual-flightbookings.airnewzealand.com.hk
www.airnz.com.hk
Other domains in certificate