HTTP/2 200 date: Mon, 29 Dec 2025 07:15:08 GMT content-type: text/html content-length: 544 last-modified: Thu, 18 Dec 2025 12:54:42 GMT etag: "6943f992-220" accept-ranges: bytes x-envoy-upstream-service-time: 1 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-store, no-cache, must-revalidate x-frame-options: DENY x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade permissions-policy: interest-cohort=() content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://cdn.jsdelivr.net/npm/text-encoding@0.7.0/lib/encoding.min.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' blob: data: https://www.google.com https://www.google.ch https://www.google-analytics.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://api.dev.testnet.certifaction.io https://api.stage.testnet.certifaction.io https://api.testnet.certifaction.io https://api.stage.certifaction.io https://api.certifaction.io; font-src 'self' https://fonts.gstatic.com; worker-src 'self' blob:; connect-src 'self' https: blob:; child-src 'self' blob: https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; frame-src 'self' https://ciam.certifaction.io https://auth.dev.testnet.certifaction.io https://auth.certifaction.io https://go.test.idnow.de https://go.test.online-ident.ch https://go.online-ident.ch https://test.jump.nect.com https://jump.test.nect.com https://jump.nect.com https://ais-sas.swisscom.com; object-src 'none'; frame-ancestors https://localhost:* https://localhost:* https://app.swisscard.ch https://home.certifaction.com https://zuhlke.certifaction.com https://spg.certifaction.com; form-action; media-src; upgrade-insecure-requests;