EZproxy and strange intermittent browser cache/certificate errors

Hi All,
We have had sporadic issues with off campus access through our EZproxy server, where a student gets an error message claiming "Your connection is not private" (Chrome) or "Your connection is not secure" (Firefox).

Example error message from Chrome:
[cid:[email protected]]

A commonality of this issue I have noticed is that the URL doesn't seem to be a properly translated EZproxy subdomain.  In the above image it should be infotrac-galegroup-com.ezp.mhcc.edu (to match our *.ezp.mhcc.edu wildcard certificate), but instead it's trying to load infotrac.galegroup.com.ezp.mhcc.edu (not substituting dots with hyphens).

I have verified that the links followed were properly formatted (https://login.ezp.mhcc.edu/login?url=[resource]).  It's also not limited to one specific resource, it happens for EBSCO/Gale/Etc.

Clearing the browser cache fixes the issue for that user, but it's happening frequently enough that it's become a significant nuisance.

I contacted OCLC support and they suggested it might be an issue with the certificate's subject alternate name.  I'm not sure if that completely makes sense though, since clearing the browser cache removes the warning, and ever certificate checker I've tried suggests it's installed correctly (see attached png).

I'm wondering if others have experienced anything similar or have any insight on what might be happening.

Thanks very much,

Matthew Anderson
Library Technology Specialist
Mt. Hood Community College



********************************************************************
If you wish to stop receiving messages from EZPROXY-L or otherwise amend your preferences,
you can do so <a href="https://www.oclc.org/forms/internet-subscription.en.html">here</a>.
Or email [email protected] including the relevant text below in the body of the email:
• To unsubscribe: "unsubscribe EZPROXY-L"
• To receive EZPROXY-L in digest form: "set EZPROXY-L digest"
• To set your options to no mail: "set EZPROXY-L nomail"
• To receive these messages in the future "set EZPROXY-L mail"
To contact the list owners directly please send your message to [email protected].
If you unsubscribe from EZPROXY-L, you will no longer be able to participate in any of its features, including the public forum.
To unsubscribe from all OCLC marketing email communications
(including all OCLC listervs, OCLC Connect emails, OCLC event notifications, product/service/cooperative updates and newsletters),
please email us at [email protected].