HTTP/1.1 200 OK
strict-transport-security: max-age=31536000
Content-Security-Policy: connect-src 'self' https://api.lever.co https://stats.g.doubleclick.net https://assets.ctfassets.net https://analytics.google.com https://www.google-analytics.com https://preview.contentful.com https://cdn.contentful.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ca p11.techlab-cdn.com; default-src 'self' p11.techlab-cdn.com; font-src 'self' https://assets.beautyboutique.ca https://fonts.gstatic.com https://api2.fonts.com data:; frame-src 11599633.fls.doubleclick.net https://bid.g.doubleclick.net bid.g.doubleclick.net; img-src 'self' data: https://dis-prod.assetful.loblaw.ca http://images.ctfassets.net https://images.ctfassets.net https://ssl.gstatic.com https://www.gstatic.com https://fonts.gstatic.com https://www.google.ca https://www.google.com https://analytics.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ca; style-src 'self' 'unsafe-inline' https://fast.fonts.net https://www.googletagmanager.com http://tagmanager.google.com https://tagmanager.google.com https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fast.fonts.net https://s7d1.scene7.com https://dis-prod.assetful.loblaw.ca https://www.google.com https://www.googleadservices.com http://tagmanager.google.com https://tagmanager.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com data: p11.techlab-cdn.com;
x-powered-by: Next.js
ETag: "692b-mGYy2s5CAcJJopQmIz33UDieNBk"
Content-Type: text/html; charset=utf-8
x-envoy-upstream-service-time: 6
Server: istio-envoy
Vary: Accept-Encoding
Cache-Control: max-age=1166, s-maxage=1
Date: Sat, 30 Nov 2024 04:00:33 GMT
Content-Length: 27181
Connection: keep-alive
Cache-Control: max-age=604800
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fast.fonts.net https://s7d1.scene7.com https://www.googletagmanager.com/ https://www.google-analytics.com https://dis-prod.assetful.loblaw.ca data: p11.techlab-cdn.com; style-src 'self' 'unsafe-inline' https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' https://assets.beautyboutique.ca https://fonts.gstatic.com https://api2.fonts.com data:; connect-src 'self' https://api.lever.co https://stats.g.doubleclick.net https://www.google-analytics.com https://assets.ctfassets.net p11.techlab-cdn.com; img-src 'self' data: https://dis-prod.assetful.loblaw.ca http://images.ctfassets.net https://images.ctfassets.net https://www.google.ca https://www.google.com https://www.google-analytics.com; frame-src http://11599633.fls.doubleclick.net/ ; default-src 'self' p11.techlab-cdn.com;
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6d:cf:00:bd:4d:8b:0e:c1:66:d5:dc:ca:e1:b8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, CN=DigiCert TLS RSA SHA256 2020 CA1
Validity
Not Before: Oct 25 00:00:00 2024 GMT
Not After : Jul 30 23:59:59 2025 GMT
Subject: C=CA, ST=Ontario, L=Brampton, O=Loblaws Inc., CN=www3.loblaw.ca
Subject Public Key Info:
Public Key Algorithm: id-ecPublicKey
Public-Key: (256 bit)
pub:
04:c7:40:72:35:03:82:c2:ed:6d:80:4d:55:78:7e:
8b:77:7c:3b:74:aa:17:5f:41:d5:4d:1f:45:60:74:
c7:81:98:d4:b3:d0:33:5c:dd:de:41:6f:64:4b:41:
10:d9:d4:59:bd:d2:fb:32:37:20:63:08:50:77:da:
f3:ab:11:43:8a
ASN1 OID: prime256v1
NIST CURVE: P-256
X509v3 extensions:
X509v3 Authority Key Identifier:
B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4
X509v3 Subject Key Identifier:
16:DC:6C:1B:FB:14:41:1D:60:E2:41:AD:23:11:20:38:C0:96:D3:B0
X509v3 Subject Alternative Name:
DNS:www3.loblaw.ca, DNS:abi.opgp.loblaw.ca, DNS:abiapi.opgp.loblaw.ca, DNS:abiweb.opgp.loblaw.ca, DNS:api-sit.loblaw.ca, DNS:api-uat.loblaw.ca, DNS:api.pcoptimum.ca, DNS:api.themobileshop.ca, DNS:arrival-detection-dev.loblaw.ca, DNS:arrival-detection-uat.loblaw.ca, DNS:arrival.loblaw.ca, DNS:assets.loblaws.ca, DNS:assets.pcoptimum.ca, DNS:axep.ca, DNS:ccp.opgp.loblaw.ca, DNS:ccpspint.opgp.loblaw.ca, DNS:ccpweb.opgp.loblaw.ca, DNS:charity.flip.ca, DNS:contentful.api.loblaw.ca, DNS:corporate.shoppersdrugmart.ca, DNS:ecoleculinairepc.ca, DNS:evpsso.loblaw.ca, DNS:exp-qalerting.abi-dia.loblaw.ca, DNS:exp-qnprinting.abi-dia.loblaw.ca, DNS:exp-qprinting.abi-dia.loblaw.ca, DNS:flip.ca, DNS:freshmart.ca, DNS:healthsolutions.morewaystobenefit.ca, DNS:import-tools.themobileshop.ca, DNS:integrityactionline.com, DNS:jfeco.dia.loblaw.ca, DNS:lcltms-abppdriverapp.loblaw.ca, DNS:lechoixdupresident.ca, DNS:lifebrand.ca, DNS:lintermarche.ca, DNS:lintermarcheinternational.ca, DNS:loblaw.ca, DNS:loblawdigital.co, DNS:loblawdigital.com, DNS:medselect.medisystem.ca, DNS:mybenefits.weston.ca, DNS:myworkdayview.com, DNS:noname.ca, DNS:parrot.dia.loblaw.ca, DNS:pc.ca, DNS:pcchef.ca, DNS:pcchildrenscharity.ca, DNS:pchealth.ca, DNS:pcoptimum.ca, DNS:platform.loblawmedia.ca, DNS:presidents-choice.ca, DNS:presidents-choice.com, DNS:presidentschoice.ca, DNS:qalerting.abi-dia.loblaw.ca, DNS:qnprinting.abi-dia.loblaw.ca, DNS:qprinting.abi-dia.loblaw.ca, DNS:realcanadianliquorstore.ca, DNS:rundeckpoc2.loblaw.ca, DNS:sanis.ca, DNS:sanis.com, DNS:sbx-qalerting.abi-dia.loblaw.ca, DNS:sbx-qnprinting.abi-dia.loblaw.ca, DNS:sbx-qprinting.abi-dia.loblaw.ca, DNS:sp.pcexpress.ca, DNS:sp.pcinsiders.ca, DNS:splunk.loblaw.ca, DNS:theodoreandpringle.ca, DNS:tm1web.shoppersdrugmart.ca, DNS:val-qalerting.abi-dia.loblaw.ca, DNS:val-qnprinting.abi-dia.loblaw.ca, DNS:val-qprinting.abi-dia.loblaw.ca, DNS:val.jfeco.dia.loblaw.ca, DNS:www.axep.ca, DNS:www.flip.ca, DNS:www.freshmart.ca, DNS:www.healthsolutions.morewaystobenefit.ca, DNS:www.integrityactionline.com, DNS:www.lechoixdupresident.ca, DNS:www.lifebrand.ca, DNS:www.lintermarche.ca, DNS:www.lintermarcheinternational.ca, DNS:www.loblaw.ca, DNS:www.loblawdigital.co, DNS:www.loblawdigital.com, DNS:www.myworkdayview.com, DNS:www.noname.ca, DNS:www.pane-fresco.ca, DNS:www.panefresco.ca, DNS:www.pcchef.ca, DNS:www.pcchildrenscharity.ca, DNS:www.pchealth.ca, DNS:www.pcoptimum.ca, DNS:www.phxsondagerx.com, DNS:www.presidentschoice.ca, DNS:www.realcanadianliquorstore.ca, DNS:www.sanis.ca, DNS:www.sanis.com, DNS:www.theodoreandpringle.ca
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Agreement
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
Timestamp : Oct 25 18:19:15.958 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:A1:77:F8:CA:19:CB:38:35:76:00:1C:
53:50:F7:17:3A:01:46:9E:4F:3C:6A:DA:A0:89:48:8C:
63:B6:B1:9A:5A:02:21:00:EC:FC:F6:71:93:E8:71:C3:
2C:89:28:34:EC:B3:AB:19:F8:84:2D:46:AC:F6:A7:42:
F8:A5:6C:74:56:33:2E:08
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
Timestamp : Oct 25 18:19:15.892 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:11:DD:31:B1:90:87:AD:16:5D:0C:9F:9E:
E5:15:19:01:FB:6F:2B:77:40:C3:7C:99:87:5F:F6:9F:
E4:18:D1:B5:02:21:00:93:A1:21:4A:09:3F:28:95:7E:
5E:6A:D0:A2:F7:0A:79:E6:7C:EF:28:94:43:F1:5E:D7:
C1:97:92:6D:40:59:3B
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Oct 25 18:19:15.908 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:22:18:AB:E7:20:2F:C1:E9:1B:5D:C0:00:
EA:B3:0A:E4:59:C3:F8:7E:AE:E4:17:D6:F6:5A:24:B4:
16:D3:8D:6C:02:20:4C:E4:14:72:1F:25:D3:9F:B2:ED:
BE:84:6A:D9:B8:67:42:46:CA:52:A3:E3:22:B5:1A:DB:
4A:3C:3F:53:DE:D9
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
82:13:9d:c5:62:1d:de:be:ec:60:d3:c9:b6:6f:eb:5b:96:5d:
a9:2d:06:d1:38:14:2e:07:b2:f9:74:f5:e4:ec:96:11:af:c5:
49:90:c9:43:d5:5d:e3:5c:08:eb:bb:d4:c6:5a:f7:64:9a:fb:
7d:d1:fc:f2:39:d4:8f:d3:22:e4:81:13:35:2f:14:a0:5d:da:
2d:c9:59:17:ee:31:b3:a3:82:41:15:01:8e:0c:09:98:6b:62:
1b:74:d7:5e:e4:88:df:23:91:29:b9:fe:6d:f6:ef:c4:e6:5f:
45:17:02:4b:f7:5a:5f:df:34:e0:c6:87:08:fd:c9:ec:1c:41:
d7:ad:76:78:66:f8:7d:e1:0c:ad:9e:f5:47:c8:d6:f0:e7:c5:
c3:1a:e8:5d:db:c1:03:65:e7:65:61:d0:6f:c5:4e:38:2f:67:
24:43:10:d4:43:9c:40:9b:e2:ea:1f:ba:f5:0c:c7:52:3c:98:
40:ba:87:f0:a9:da:83:4e:16:ff:35:a0:b9:e9:70:62:d5:ea:
ab:7c:c2:d7:05:11:71:51:9d:60:2f:4a:35:57:74:a1:81:9e:
56:75:f8:2d:cb:50:4d:33:24:54:94:c9:9e:33:32:a6:26:8c:
36:b4:9e:14:7c:46:d8:fc:87:72:5b:e0:94:00:02:e4:7a:bd:
f3:4a:73:fd
