CORS Headers when checking company name

I can get everything working using cURL, but cannot seem to get it working using AJAX please could you advise, I am from Ltdonline.

my code:-
<!doctype html>

Untitled Document

ERRORS:
This
site makes use of a SHA-1 Certificate; it’s recommended you use
certificates with signature algorithms that use hash functions stronger
than SHA-1.Cross-Origin
Request Blocked: The Same Origin Policy disallows reading the remote
resource at
https://api.companieshouse.gov.uk/search/companies?q=malt&items_per_page=10.
(Reason: missing token ‘cache-control’ in CORS header
’Access-Control-Allow-Headers’ from CORS preflight channel).

Dealing with under