Open
Cached
·
just now
86/100
SECURITY SCORE
Certificate Information
Subject
CN=www.airnewzealand.co.nz
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M04
Valid From
November 19, 2025
Valid Until
December 18, 2026
393 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:D0:24:13:2D:01:92:85:37:58:24:56:5C:48:26:B9:96:03:E8:BC:94:F5:72:16:B7:57:6F:61:D7:AA:14:E0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000
Content-Security-Policy
Basic
default-src; img-src; font-src; +2 more
default-src * 'unsafe-inline' 'unsafe-eval' ; img-src * blob: data: 'unsafe-inline' ; font-src * data: 'unsafe-inline' ; media-src * blob: 'unsafe-inline' ; frame-src * data: 'unsafe-inline' 'unsafe-eval' ;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
NOSNIFF
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
97 domains
airnewzealand.co.nz
aptool.airnewzealand.co.nz
aussie-map.airnewzealand.co.nz
auth.airnewzealand.co.nz
bookings.airnewzealand.co.nz
calibration.airnewzealand.co.nz
carbonoffset.airnewzealand.co.nz
chinahiddenwonders.airnewzealand.co.nz
cn.airnewzealand.co.nz
cnhotels.airnewzealand.co.nz
cruises.airnewzealand.co.nz
discoverseoul.airnewzealand.co.nz
fiji.airnewzealand.co.nz
flightbookings.airnewzealand.co.nz
flybuysflights.airnewzealand.co.nz
govtbookings.airnewzealand.co.nz
inspire.airnewzealand.co.nz
jobs.airnewzealand.co.nz
m.airnewzealand.co.nz
merchandise.airnewzealand.co.nz
nzadventure.airnewzealand.co.nz
pinamillion.airnewzealand.co.nz
promos.airnewzealand.co.nz
qual-flightbookings.airnewzealand.co.nz
queenslandemotionscanner.airnewzealand.co.nz
res.airnewzealand.co.nz
seemoreofnz.airnewzealand.co.nz
thetravelmapper.airnewzealand.co.nz
whereinasia.airnewzealand.co.nz
whereinasianm.airnewzealand.co.nz
wheretonext.airnewzealand.co.nz
wifi.airnewzealand.co.nz
wine.airnewzealand.co.nz
winestore.airnewzealand.co.nz
www.airnewzealand.co.nz
yousayyay.airnewzealand.co.nz
aws.redirector.airnewzealand.co.nz
nzadventure.cn.airnewzealand.co.nz
pacific.bookings.airnewzealand.co.nz
shuangshiyi.cn.airnewzealand.co.nz
vr.inspire.airnewzealand.co.nz
www.calibration.airnewzealand.co.nz
www.campervans.airnewzealand.co.nz
www.capitalnotes.airnewzealand.co.nz
www.carbonoffset.airnewzealand.co.nz
www.cn.airnewzealand.co.nz
www.m.airnewzealand.co.nz
www.survey.airnewzealand.co.nz
www.taxi.airnewzealand.co.nz
www.wine.airnewzealand.co.nz
80yearsyoung.co.nz
air-new-zealand.co.nz
www.air-new-zealand.co.nz
air-nz.co.nz
www.air-nz.co.nz
air.co.nz
www.air.co.nz
linkflightplanner.air.nz
wifi.air.nz
www.air.nz
www.linkflightplanner.air.nz
airnelson.co.nz
www.airnelson.co.nz
airnewzealand.co.jp
auth.airnewzealand.co.jp
flightbookings.airnewzealand.co.jp
qual-flightbookings.airnewzealand.co.jp
vacation.airnewzealand.jp
www.vacation.airnewzealand.jp
airnewzealand.kr
auth.airnewzealand.kr
flightbookings.airnewzealand.kr
airnewzealand.lu
www.airnewzealand.lu
airnewzealand.mx
www.airnewzealand.mx
airnewzealand.nc
www.airnewzealand.nc
airnewzealandacademyoflearning.co.nz
www.airnewzealandacademyoflearning.co.nz
airnewzealandagent.co.nz
www.airnewzealandagent.co.nz
m.airnz.co.jp
www.abudeka.airnz.co.jp
www.eikaiwa.airnz.co.jp
airnz.jp
m.airnz.jp
www.airnz.jp
airnz.mx
www.airnz.mx
airnzagent.jp
restfulguidelines.aws-ocm.nz
airnewzealand.co.kr
auth.airnewzealand.co.kr
flightbookings.airnewzealand.co.kr
airnewzealand.com.my
www.airnewzealand.com.my
Other domains in certificate