The FCA is the financial services regulator in the UK.

Their website (handbook.fca.org.uk) makes use of an API with the hostname public-prod-api.azurewebsites.net and the certificate has no organisation information.

Also the JS has at least one "debugger" statement in it.

What is wrong with people?

If we set up our website like that, can we keep all of our regulatory permissions, or might some questions be asked about our horsemanship and pistol-shooting skills?