Open
Cached
·
just now
95/100
SECURITY SCORE
Certificate Information
Subject
CN=www.airnewzealand.co.nz
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M02
Valid From
August 26, 2025
Valid Until
September 24, 2026
310 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:3F:32:7D:E7:C0:E8:BF:A5:10:8C:EC:CA:12:69:62:36:BD:22:FD:EB:19:4D:66:1C:E4:B1:76:63:AD:BD:1C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains;
Content-Security-Policy
Basic
block-all-mixed-content; default-src; base-uri; +12 more
block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.jp flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.cn flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.eu flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.kr flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.grabaseat.co.nz govtbookings.airnewzealand.co.nz au-connect.authsignal.com auth.identity.airnewzealand.com auth.identity.qual.airnewzealand.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com; script-src 'self' p-airnz.com 'unsafe-inline' 'unsafe-eval' flightbookings.airnewzealand.ca t.a3cloud.net ib.adnxs.com *.demdex.net www.everestjs.net oc-cdn-public-oce.azureedge.net https://unpkg.com/[email protected]/dist/chat-adapter.js www.googleadservices.com www.google.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com www.google-analytics.com analytics.google.com tagmanager.google.com *.doubleclick.net static.hotjar.com script.hotjar.com https://widget.timatic.iata.org/scripts/iata-timatic-widget-live.js md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au cdn-au.onetrust.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com upgrade.plusgrade.com s.swiftypecdn.com player.vimeo.com s.wayin.com xd.wayin.com x.wayin.com eu-x.wayin.com s.engagesciences.com display.engagesciences.com display.wayin.com yourir.info www.youtube.com s.ytimg.com; style-src 'unsafe-inline' p-airnz.com 'self' oc-cdn-public-oce.azureedge.net fonts.googleapis.com tagmanager.google.com static.hotjar.com script.hotjar.com upgrade-cdn-prd.plusgrade.com upgrade-prod-cdn.plusgrade.com s.swiftypecdn.com yourir.info; img-src https: data: blob: ad.doubleclick.net ade.googlesyndication.com adservice.google.com www.googletagmanager.com www.google.com static.hotjar.com script.hotjar.com *.kampyle.com i.vimeocdn.com i.ytimg.com; font-src p-airnz.com 'self' *.cdn.office.net fonts.googleapis.com fonts.gstatic.com script.hotjar.com data: dhm5hy2vn8l0l.cloudfront.net; media-src 'self' p-airnz.com data: video.cdnvue.com; frame-src 'self' *.demdex.net www.everestjs.net pixel.everesttech.net au-connect.authsignal.com auth.identity.airnewzealand.com identity.airnewzealand.com airnz-cargo.chooose.today airnz-corporate.chooose.today forms.cd.airnewzealand.co.nz sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com test.adyen.com oc-cdn-public-oce.azureedge.net blob: comms.omnichannelengagementhub.com customervoice.microsoft.com www.googletagmanager.com td.doubleclick.net *.google.com *.doubleclick.net vars.hotjar.com nebula-cdn.kampyle.com www.airnewzealand.co.nz/airpoints-account/payments/scripts/done.html www.airnewzealand.co.nz/payment/scripts/done.html *.cdn-pci.optimizely.com nz.fltmaps.com v.qq.com player.vimeo.com xd.wayin.com x.wayin.com eu-x.wayin.com display.engagesciences.com airnz.wufoo.com player.youku.com www.youtube.com; worker-src blob:; connect-src 'self' api.airnz.io api.airnz.ai p-airnz.com *.demdex.net *.tt.omtrdc.net identity.airnewzealand.com sec.windcave.com uat.windcave.com checkoutshopper-test.adyen.com checkoutshopper-live-au.adyen.com unq0355446423e84eb397bc71189d78d-crm6.omnichannelengagementhub.com browser.pipe.aria.microsoft.com *.omnichannelengagementhub.com *.au.omnichannelengagementhub.com https://*.trouter.skype.com wss://*.trouter.skype.com edge.skype.com *.communication.azure.com ocsdk-prod.azureedge.net blob: pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com ad.doubleclick.net *.googleapis.com *.google.com *.gstatic.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.timatic.iata.org/api/ md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au cdn-au.onetrust.com geolocation.onetrust.com privacyportal-au.onetrust.com *.optimizely.com https://*.sentry.io s.swiftypecdn.com search-api.swiftype.com yourir.info; object-src 'none'; frame-ancestors 'self'; report-uri /csp-report
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
geolocation=(self "https://p-airnz.com"), camera=(), fullscreen=(self "https://www.youtube.com"), accelerometer=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), sync-xhr=(*), usb=(), web-share=(self), clipboard-read=(), clipboard-write=()
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 4 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
97 domains
betterwaytofly.ca
www.betterwaytofly.ca
abetterwaytofly.com.au
www.abetterwaytofly.com.au
airnelson.com
www.airnelson.com
airnewzealand.at
www.airnewzealand.at
airnewzealand.ca
auth.airnewzealand.ca
betterwaytofly.airnewzealand.ca
carbonoffset.airnewzealand.ca
flightbookings.airnewzealand.ca
qual-flightbookings.airnewzealand.ca
res.airnewzealand.ca
www.campervans.airnewzealand.ca
airnewzealand.ch
www.airnewzealand.ch
airnewzealand.cn
auth.airnewzealand.cn
flightbookings.airnewzealand.cn
hotels.airnewzealand.cn
m.airnewzealand.cn
shuangshiyi.airnewzealand.cn
www.airnewzealand.co.nz
airnewzealand.com
antarctica.airnewzealand.com
auth.airnewzealand.com
betterwaytofly.airnewzealand.com
bookings.airnewzealand.com
carbonoffset.airnewzealand.com
flightbookings.airnewzealand.com
flightbookings.cn.airnewzealand.com
flightbookings.jp.airnewzealand.com
insurance.airnewzealand.com
journeys.airnewzealand.com
m.airnewzealand.com
www.antarctica.airnewzealand.com
www.campervans.airnewzealand.com
www.insurance.airnewzealand.com
www.m.airnewzealand.com
airnewzealand.com.au
auth.airnewzealand.com.au
betterwaytofly.airnewzealand.com.au
carbonoffset.airnewzealand.com.au
flightbookings.airnewzealand.com.au
m.airnewzealand.com.au
nzdash.airnewzealand.com.au
qual-flightbookings.airnewzealand.com.au
res.airnewzealand.com.au
www.campervans.airnewzealand.com.au
www.m.airnewzealand.com.au
airnewzealand.com.co
www.airnewzealand.com.co
airnewzealandpoints.com.au
www.airnewzealandpoints.com.au
airnewzealandvacations.cn
www.airnewzealandvacations.cn
www.airnewzeland.com.au
airnz.be
www.airnz.be
airnz.ca
m.airnz.ca
www.airnz.ca
airnz.com.au
hotels.airnz.com.au
m.airnz.com.au
www.airnz.com.au
www.m.airnz.com.au
airnz.com.co
airnzagent.ca
www.airnzagent.ca
airnzagent.cn
www.airnzagent.cn
airnzagent.com.au
airnzpoints.com.au
www.airnzpoints.com.au
betterwaytofly.com.au
www.betterwaytofly.com.au
airnewzealand.co.at
www.airnewzealand.co.at
airnewzealand.com.cn
airnewzealandvacations.com.cn
auth.airnewzealand.com.cn
flightbookings.airnewzealand.com.cn
hotels.airnewzealand.com.cn
m.airnewzealand.com.cn
qual-flightbookings.airnewzealand.com.cn
www.airnewzealandvacations.com.cn
futuretakingflight.com.au
www.futuretakingflight.com.au
grabaseat.com.au
www.grabaseat.com.au
myairnz.com.au
www.myairnz.com.au
onesmart.com.au
www.onesmart.com.au
Other domains in certificate