HTTP/1.1 200 OK
Cache-Control: s-maxage=31536000, stale-while-revalidate
strict-transport-security: max-age=31536000
Content-Security-Policy: connect-src 'self' https://multi-item-broker.flippback.com https://sentry.io https://ws2.bullseyelocations.com https://maps.googleapis.com https://aq.flippenterprise.net https://p.flipp.com https://sfml.flippback.com https://dam.flippenterprise.net cdn-gateflipp.flippback.com https://cdn.contentful.com https://preview.contentful.com https://stats.g.doubleclick.net https://assets.ctfassets.net https://analytics.google.com https://www.google-analytics.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ca p11.techlab-cdn.com; default-src 'self' p11.techlab-cdn.com; font-src 'self' https://cdn.fonts.net https://assets.beautyboutique.ca https://fonts.gstatic.com https://api2.fonts.com data:; frame-src https://bid.g.doubleclick.net bid.g.doubleclick.net; img-src 'self' data: https://f.wishabi.net https://dis-prod.assetful.loblaw.ca https://a.wishabi.com https://aq.flippenterprise.net https://cdn.flippenterprise.net https://maps.googleapis.com http://images.ctfassets.net https://images.ctfassets.net https://ssl.gstatic.com https://www.gstatic.com https://maps.gstatic.com https://fonts.gstatic.com https://www.google.ca https://www.google.com https://analytics.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ca; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com https://aq.flippenterprise.net https://cdn.fonts.net https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s7d1.scene7.com https://dis-prod.assetful.loblaw.ca https://aq.flippenterprise.net https://maps.googleapis.com https://www.google.com https://www.googleadservices.com http://tagmanager.google.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com data: blob: p11.techlab-cdn.com;
x-nextjs-cache: HIT
x-powered-by: Next.js
ETag: "rse3dkm1qiwul"
Content-Type: text/html; charset=utf-8
x-envoy-upstream-service-time: 3
Server: istio-envoy
Vary: Accept-Encoding
Date: Wed, 08 May 2024 03:08:00 GMT
Content-Length: 42895
Connection: keep-alive
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4a:15:2e:4f:c3:a8:d0:d3:d9:44:8e:f1:f7:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1
Validity
Not Before: Oct 18 00:00:00 2023 GMT
Not After : Oct 17 23:59:59 2024 GMT
Subject: C=CA, ST=Ontario, L=Brampton, O=Loblaws Inc., CN=www3.loblaw.ca
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:28:70:b9:31:c8:d3:14:da:1a:8b:73:9a:a5:49:
7b:48:50:e4:22:e0:53:6f:be:d6:0e:9e:93:33:ba:
d6:f3:41:97:9f:c3:27:7c:46:36:df:ab:a7:99:b3:
c1:04:bf:41:66:11:2e:33:79:9c:9e:7d:1b:00:54:
35:7b:e1:6a:80
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
X509v3 Subject Key Identifier:
19:BB:CD:CF:E6:CE:1F:16:D1:97:B5:E7:AF:ED:F4:BB:2C:FD:A0:D0
X509v3 Subject Alternative Name:
DNS:www3.loblaw.ca, DNS:abi.opgp.loblaw.ca, DNS:abiapi.opgp.loblaw.ca, DNS:abiweb.opgp.loblaw.ca, DNS:api-sit.loblaw.ca, DNS:api-uat.loblaw.ca, DNS:api.pcoptimum.ca, DNS:api.themobileshop.ca, DNS:arrival-detection-dev.loblaw.ca, DNS:arrival-detection-uat.loblaw.ca, DNS:arrival.loblaw.ca, DNS:assets.loblaws.ca, DNS:assets.pcoptimum.ca, DNS:axep.ca, DNS:ccp.opgp.loblaw.ca, DNS:ccpspint.opgp.loblaw.ca, DNS:ccpweb.opgp.loblaw.ca, DNS:charity.flip.ca, DNS:contentful.api.loblaw.ca, DNS:corporate.shoppersdrugmart.ca, DNS:ecoleculinairepc.ca, DNS:evpsso.loblaw.ca, DNS:exp-qalerting.abi-dia.loblaw.ca, DNS:exp-qnprinting.abi-dia.loblaw.ca, DNS:exp-qprinting.abi-dia.loblaw.ca, DNS:flip.ca, DNS:freshmart.ca, DNS:healthsolutions.morewaystobenefit.ca, DNS:import-tools.themobileshop.ca, DNS:integrityactionline.com, DNS:jfeco.dia.loblaw.ca, DNS:lcltms-abppdriverapp.loblaw.ca, DNS:lechoixdupresident.ca, DNS:lifebrand.ca, DNS:lintermarche.ca, DNS:lintermarcheinternational.ca, DNS:loblaw.ca, DNS:loblawdigital.co, DNS:loblawdigital.com, DNS:loblawonlinerequests.ca, DNS:medselect.medisystem.ca, DNS:mybenefits.weston.ca, DNS:myworkdayview.com, DNS:noname.ca, DNS:parrot.dia.loblaw.ca, DNS:pc.ca, DNS:pcchef.ca, DNS:pcchildrenscharity.ca, DNS:pchealth.ca, DNS:pcoptimum.ca, DNS:platform.loblawmedia.ca, DNS:presidents-choice.ca, DNS:presidents-choice.com, DNS:presidentschoice.ca, DNS:qalerting.abi-dia.loblaw.ca, DNS:qnprinting.abi-dia.loblaw.ca, DNS:qprinting.abi-dia.loblaw.ca, DNS:realcanadianliquorstore.ca, DNS:rundeckpoc2.loblaw.ca, DNS:sanis.ca, DNS:sanis.com, DNS:sbx-qalerting.abi-dia.loblaw.ca, DNS:sbx-qnprinting.abi-dia.loblaw.ca, DNS:sbx-qprinting.abi-dia.loblaw.ca, DNS:sp.pcexpress.ca, DNS:sp.pcinsiders.ca, DNS:splunk.loblaw.ca, DNS:theodoreandpringle.ca, DNS:tm1web.shoppersdrugmart.ca, DNS:val-qalerting.abi-dia.loblaw.ca, DNS:val-qnprinting.abi-dia.loblaw.ca, DNS:val-qprinting.abi-dia.loblaw.ca, DNS:val.jfeco.dia.loblaw.ca, DNS:www.axep.ca, DNS:www.flip.ca, DNS:www.freshmart.ca, DNS:www.healthsolutions.morewaystobenefit.ca, DNS:www.integrityactionline.com, DNS:www.lechoixdupresident.ca, DNS:www.lifebrand.ca, DNS:www.lintermarche.ca, DNS:www.lintermarcheinternational.ca, DNS:www.loblaw.ca, DNS:www.loblawdigital.co, DNS:www.loblawdigital.com, DNS:www.loblawonlinerequests.ca, DNS:www.myworkdayview.com, DNS:www.noname.ca, DNS:www.pane-fresco.ca, DNS:www.panefresco.ca, DNS:www.pcchef.ca, DNS:www.pcchildrenscharity.ca, DNS:www.pchealth.ca, DNS:www.pcoptimum.ca, DNS:www.presidentschoice.ca, DNS:www.realcanadianliquorstore.ca, DNS:www.sanis.ca, DNS:www.sanis.com, DNS:www.theodoreandpringle.ca
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Agreement
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Oct 18 19:32:38.154 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:4F:20:51:95:D0:D7:1A:AC:B7:80:8E:08:
7A:EA:7A:B6:FA:B5:81:F7:8F:EB:B6:E6:66:D5:95:4D:
BC:38:2C:17:02:21:00:DB:C1:15:81:D3:EC:05:ED:B3:
C8:0A:5E:14:D7:86:AF:04:57:9E:FB:BF:99:07:DF:6C:
12:85:CD:FF:4F:87:60
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Oct 18 19:32:38.152 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:FF:2F:7A:02:F2:FA:F5:3F:A4:8F:75:
B1:F7:DE:AF:AF:CC:2B:32:E1:7D:96:93:BB:AD:C5:F0:
38:F8:DF:11:A7:02:21:00:C7:64:31:83:4F:C2:F5:32:
19:80:40:52:78:BB:12:52:B4:94:AE:AD:55:A0:1C:FA:
C2:F6:9F:06:1F:DF:2E:1C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Oct 18 19:32:38.152 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:5F:20:2C:CA:ED:C8:54:08:3E:A5:63:8A:
B2:17:87:99:FF:2F:7F:4E:46:9F:4C:F5:E0:38:37:B8:
F8:FA:94:91:02:20:5C:A4:31:62:94:DF:0F:94:C1:D9:
50:FE:B1:EE:75:B6:1B:E7:F1:08:37:44:33:01:E9:36:
94:AA:DC:86:8B:FB
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
22:4c:98:1a:55:69:7f:cf:9c:e6:c6:25:0b:a3:c6:d9:db:95:
33:7e:61:29:75:b9:2f:1f:60:58:f3:2a:ff:33:e2:d5:19:5b:
96:88:fb:7d:22:44:05:97:84:99:9f:b7:af:85:e6:4e:83:32:
0e:c8:47:91:8b:cd:f5:88:67:71:b9:dd:39:7d:c3:31:62:dc:
74:53:24:0f:03:a7:08:65:66:39:4a:50:aa:b9:7c:de:21:d4:
42:0c:1e:ad:1e:02:4a:7e:e2:6f:26:c5:6b:d4:32:f4:f8:41:
b8:3d:e2:20:d2:bb:36:ce:51:68:c8:b1:47:5c:99:1d:13:5a:
95:d8:0e:4d:46:83:15:b2:20:88:13:a6:29:d2:6d:cf:70:1d:
5e:ef:e6:6f:6c:6a:6a:11:7b:cc:fc:29:3e:c1:3a:ca:c4:66:
42:9c:90:c9:f9:50:07:72:59:28:8a:53:5e:c1:41:1d:da:a8:
6c:60:69:b8:a6:b5:a9:68:d8:e5:fd:6e:3c:3d:26:d1:4d:b5:
72:0b:d7:97:7d:dc:db:13:57:eb:29:73:28:8a:0f:b4:87:11:
e6:76:6e:e6:fa:c4:49:9f:47:64:60:4c:da:91:7b:85:67:2d:
ba:bd:08:09:5b:28:15:45:86:38:d4:13:db:05:e3:d9:bb:4b:
66:5f:a0:47
