| Cache-Control | private |
| Content-Type | text/html; charset=utf-8 |
| Content-Encoding | gzip |
| Vary | Accept-Encoding,Accept-Encoding |
| Server | Microsoft-IIS/8.5 |
| X-AspNet-Version | 4.0.30319 |
| X-XSS-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| Content-Security-Policy | Content-Security-Policy:default-src 'self'; |
| Public-Key-Pins | max-age=2592000;pin-sha256="GRAH5Ex+kB4cCQi5gMU82urf+6kEgbVtzfCSkw55AGk=";pin-sha256="Dh46PQn5HIpXCusEb8G7YJsLzBSGAzNjgvsxeShjlv8=" |
| Referrer-Policy | no-referrer-when-downgrade |