i believe that might be the piggyback SSL add-on for heroku. with an improper SSL certificate implementation, that's bound to happen in 50%-75% of browsers