For all devs out there, if you are thinking on using self signed certificate on ".dev" domain, forget about it... it's not your server setting HSTS flag, for whatever reason that domain is special, so you can't use self signed you have to obtain real certificate.