| Cache-Control | private |
| Content-Type | text/html; charset=utf-8 |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |
| strict-transport-security | max-age=31536000; includeSubdomains |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | SAMEORIGIN |
| X-XSS-Protection | 1; mode=block |
| Referrer-Policy | strict-origin |
| Content-Security-Policy | upgrade-insecure-requests |
| Public-Key-Pins | pin-sha256="RICCVCGBg33YaC51NyAyqdm5On8CHmt9CQ5Dkl40KMc="; pin-sha256="3PA3lmVYoCqp0iuahl9UKakIr8wHDnsn3b7BLUiAGz4="; pin-sha256="sZAPrSRlCVnLGgdLzjszKb+ylLABWvW19mNlC1yGKnc="; pin-sha256="TrMMzNOy7wukYL/0a1TGnh1Q2eKD7XvCClkGvLZWWIM="; pin-sha256="hKQelIK8N3IYs4ugalVP6XVZQQOGQjKa97a6NLjAsaI="; pin-sha256="hmbWEJr25xCoum/UYiQJmpwQxxzFAHodrJFQEvbKMP0="; max-age=60; includeSubDomains |
| Expect-CT | enforce; max-age=30; report-uri="https://gw.cgate.tech/services/rawlog.ashx" |