Open
Cached
·
1h ago
88/100
SECURITY SCORE
Certificate Information
Subject
CN=www.airnewzealand.co.nz
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M02
Valid From
August 26, 2025
Valid Until
September 24, 2026
319 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:3F:32:7D:E7:C0:E8:BF:A5:10:8C:EC:CA:12:69:62:36:BD:22:FD:EB:19:4D:66:1C:E4:B1:76:63:AD:BD:1C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Weak
style-src
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Significantly strengthen CSP directives
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 4 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
97 domains
airnzpoints.com.au
www.airnzpoints.com.au
abetterwaytofly.com.au
www.abetterwaytofly.com.au
airnelson.com
www.airnelson.com
airnewzealand.at
www.airnewzealand.at
airnewzealand.ca
auth.airnewzealand.ca
betterwaytofly.airnewzealand.ca
carbonoffset.airnewzealand.ca
flightbookings.airnewzealand.ca
qual-flightbookings.airnewzealand.ca
res.airnewzealand.ca
www.campervans.airnewzealand.ca
airnewzealand.ch
www.airnewzealand.ch
airnewzealand.cn
auth.airnewzealand.cn
flightbookings.airnewzealand.cn
hotels.airnewzealand.cn
m.airnewzealand.cn
shuangshiyi.airnewzealand.cn
www.airnewzealand.co.nz
airnewzealand.com
antarctica.airnewzealand.com
auth.airnewzealand.com
betterwaytofly.airnewzealand.com
bookings.airnewzealand.com
carbonoffset.airnewzealand.com
flightbookings.airnewzealand.com
flightbookings.cn.airnewzealand.com
flightbookings.jp.airnewzealand.com
insurance.airnewzealand.com
journeys.airnewzealand.com
m.airnewzealand.com
www.antarctica.airnewzealand.com
www.campervans.airnewzealand.com
www.insurance.airnewzealand.com
www.m.airnewzealand.com
airnewzealand.com.au
auth.airnewzealand.com.au
betterwaytofly.airnewzealand.com.au
carbonoffset.airnewzealand.com.au
flightbookings.airnewzealand.com.au
m.airnewzealand.com.au
nzdash.airnewzealand.com.au
qual-flightbookings.airnewzealand.com.au
res.airnewzealand.com.au
www.campervans.airnewzealand.com.au
www.m.airnewzealand.com.au
airnewzealand.com.co
www.airnewzealand.com.co
airnewzealandpoints.com.au
www.airnewzealandpoints.com.au
airnewzealandvacations.cn
www.airnewzealandvacations.cn
www.airnewzeland.com.au
airnz.be
www.airnz.be
airnz.ca
m.airnz.ca
www.airnz.ca
airnz.com.au
hotels.airnz.com.au
m.airnz.com.au
www.airnz.com.au
www.m.airnz.com.au
airnz.com.co
airnzagent.ca
www.airnzagent.ca
airnzagent.cn
www.airnzagent.cn
airnzagent.com.au
betterwaytofly.ca
www.betterwaytofly.ca
betterwaytofly.com.au
www.betterwaytofly.com.au
airnewzealand.co.at
www.airnewzealand.co.at
airnewzealand.com.cn
airnewzealandvacations.com.cn
auth.airnewzealand.com.cn
flightbookings.airnewzealand.com.cn
hotels.airnewzealand.com.cn
m.airnewzealand.com.cn
qual-flightbookings.airnewzealand.com.cn
www.airnewzealandvacations.com.cn
futuretakingflight.com.au
www.futuretakingflight.com.au
grabaseat.com.au
www.grabaseat.com.au
myairnz.com.au
www.myairnz.com.au
onesmart.com.au
www.onesmart.com.au
Other domains in certificate